Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

3,476 results · Feed

  • High 8.1
    CVE-2020-3257

    Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • High 8.1
    CVE-2020-3238

    Cisco IOx Application Framework Arbitrary File Creation Vulnerability

    A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance that is running on the affected device. The vulnerab…

    Cisco Cisco IOx Network devices
  • Medium 6.3
    CVE-2020-3237

    Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability

    A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on the affected device. The vulnerability i…

    Cisco Cisco IOx Network devices
  • High 7.7
    CVE-2020-3235

    Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnera…

    Cisco Cisco IOS 12.2(53)SG1 iOS Network devices
  • High 8.8
    CVE-2020-3234

    Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability

    A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated but low-privileged, …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Medium 6.4
    CVE-2020-3233

    Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based Local Manager interface of an a…

    Cisco Cisco IOx Network devices
  • Medium 6.3
    CVE-2020-3232

    Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to i…

    Cisco Cisco ASR 920 Series Aggregation Services Router Network devices
  • High 7.7
    CVE-2020-3200

    Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability

    A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented corr…

    Cisco Cisco IOS 12.2(58)SE iOS Network devices
  • High 8.1
    CVE-2020-3199

    Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Critical 9.8
    CVE-2020-3198

    Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities

    Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local att…

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Medium 6.8
    CVE-2020-3228

    Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability

    A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS)…

    Cisco Cisco IOS 15.3(2)T iOS Network devices
  • Medium 4.7
    CVE-2020-3231

    Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability

    A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists b…

    Cisco Cisco IOS 15.2(5a)E iOS Network devices
  • High 7.5
    CVE-2020-3230

    Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerability

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent IKEv2 from establishing new security associations. The vulnerability is du…

    Cisco Cisco IOS 15.1(2)T iOS Network devices
  • High 8.8
    CVE-2020-3229

    Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

    A vulnerability in Role Based Access Control (RBAC) functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorre…

    Cisco Cisco IOS XE Software 16.2.2 iOS Network devices
  • Critical 9.8
    CVE-2020-3227

    Cisco IOx for IOS XE Software Privilege Escalation Vulnerability

    A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API commands without proper authorization. The vulnerability is du…

    Cisco Cisco IOS XE Software 16.3.1 iOS Network devices
  • High 8.6
    CVE-2020-3226

    Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

    A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The v…

    Cisco Cisco IOS 15.0(2)SG11a iOS Network devices
  • High 8.6
    CVE-2020-3225

    Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service Vulnerabilities

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of serv…

    Cisco Cisco IOS 12.2(55)SE iOS Network devices
  • High 8.8
    CVE-2020-3224

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege lev…

    Cisco Cisco IOS XE Software 16.11.1 iOS Network devices
  • Medium 4.5
    CVE-2020-3223

    Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability

    A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insu…

    Cisco Cisco IOS XE Software 16.9.4 iOS Network devices
  • Medium 4.3
    CVE-2020-3222

    Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability

    A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass access control restrictions on an affected device. The vulnerability is due to the presence of a proxy service at a s…

    Cisco Cisco IOS XE Software 16.10.1 iOS Network devices
  • High 8.6
    CVE-2020-3221

    Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability

    A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.…

    Cisco Cisco IOS XE Software 16.10.1 iOS Network devices
  • Medium 6.8
    CVE-2020-3220

    Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability

    A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers could allow an unauthenticated, remote attacker to disconnect legitimate IPsec VPN sessions…

    Cisco Cisco IOS XE Software 16.4.1 iOS Network devices
  • High 8.8
    CVE-2020-3219

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. The vulnerability is due to …

    Cisco Cisco IOS XE Software 16.1.1 iOS Network devices
  • High 7.2
    CVE-2020-3218

    Cisco IOS XE Software Web UI Remote Code Execution Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges on the underlying Linux shell. The vulnerability is due to improper validation o…

    Cisco Cisco IOS XE Software 16.6.1 iOS Network devices
  • High 8.8
    CVE-2020-3217

    Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability

    A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or ca…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 6.8
    CVE-2020-3216

    Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability

    A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insuffi…

    Cisco Cisco IOS XE SD-WAN Software iOS Network devices
  • Medium 6.7
    CVE-2020-3215

    Cisco IOS XE Software Privilege Escalation Vulnerability

    A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual ap…

    Cisco Cisco IOS XE Software 3.8.0S iOS Network devices
  • Medium 6.7
    CVE-2020-3214

    Cisco IOS XE Software Privilege Escalation Vulnerability

    A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could all…

    Cisco Cisco IOS XE Software 16.11.1 iOS Network devices
  • Medium 6.7
    CVE-2020-3213

    Cisco IOS XE Software Privilege Escalation Vulnerability

    A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to those of the root user of the underlying operating system. The vulnerability is due to the ROMMON allowing for special parameters to b…

    Cisco Cisco IOS XE Software 3.8.0S iOS Network devices
  • High 7.2
    CVE-2020-3212

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input saniti…

    Cisco Cisco IOS XE Software 16.11.1 iOS Network devices
  • High 7.2
    CVE-2020-3211

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input saniti…

    Cisco Cisco IOS XE Software 16.10.1 iOS Network devices
  • Medium 6.7
    CVE-2020-3210

    Cisco IOS Software for Cisco Industrial Routers Virtual Device Server CLI Command Injection Vulnerability

    A vulnerability in the CLI parsers of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated, local attacker to execute arbitrary sh…

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Medium 6.8
    CVE-2020-3209

    Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability

    A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an imprope…

    Cisco Cisco IOS XE Software 3.2.0SG iOS Network devices
  • Medium 6.7
    CVE-2020-3208

    Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability

    A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) could allow an authenticated, local attacker to boot a malicious software image on an affected device. The v…

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Medium 6.7
    CVE-2020-3207

    Cisco IOS XE Software Command Injection Vulnerability

    A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system (OS) to conduct a command injection attack during device boot. …

    Cisco Cisco IOS XE Software 16.9.2 iOS Network devices
  • Medium 4.7
    CVE-2020-3206

    Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability

    A vulnerability in the handling of IEEE 802.11w Protected Management Frames (PMFs) of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to terminate a valid user connection…

    Cisco Cisco IOS XE Software 16.10.1 iOS Network devices
  • High 8.8
    CVE-2020-3205

    Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection Vulnerability

    A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, adjacent …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Medium 6.7
    CVE-2020-3204

    Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability

    A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to execute arbitrary code on the underlying operating system (OS) with…

    Cisco Cisco IOS 12.2(53)SE1 iOS Network devices
  • High 8.6
    CVE-2020-3203

    Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability

    A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead …

    Cisco Cisco IOS XE Software 16.1.1 iOS Network devices
  • Medium 6.0
    CVE-2020-3201

    Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability

    A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to cause a denial of service (DoS) condition on an affected system. Th…

    Cisco Cisco IOS 12.2(25)S iOS Network devices