Cisco IOS and IOS XE
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0189 | Cisco IOS and IOS XE | A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated | MEDIUM 5.3 | 1.0 % | ||
| CVE-2018-0174 | Cisco IOS and IOS XE | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic | HIGH 8.6 | 7.6 % | KEV | |
| CVE-2018-0173 | Cisco IOS and IOS XE | A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Versio | HIGH 8.6 | 7.6 % | KEV | |
| CVE-2018-0172 | Cisco IOS and IOS XE | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic | HIGH 8.6 | 7.8 % | KEV | |
| CVE-2018-0171 | Cisco IOS and IOS XE | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker | CRITICAL 9.8 | 99 % | KEV | |
| CVE-2018-0159 | Cisco IOS and IOS XE | A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Softwa | HIGH 7.5 | 6.9 % | KEV | |
| CVE-2018-0158 | Cisco IOS and IOS XE | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthe | HIGH 8.6 | 7.2 % | KEV | |
| CVE-2018-0156 | Cisco IOS and IOS XE | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker | HIGH 7.5 | 9.4 % | KEV | |
| CVE-2018-0155 | Cisco IOS and IOS XE | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Cata | HIGH 8.6 | 7.7 % | KEV | |
| CVE-2018-0151 | Cisco IOS and IOS XE | A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, re | CRITICAL 9.8 | 14 % | KEV | |
| CVE-2018-0123 | Cisco IOS and IOS XE | A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-12304 | Cisco IOS and IOS XE | A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, rem | MEDIUM 6.1 | 1.2 % | ||
| CVE-2017-12240 | Cisco IOS and IOS XE | The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticat | CRITICAL 9.8 | 14 % | KEV | |
| CVE-2017-12237 | Cisco IOS and IOS XE | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could | HIGH 7.5 | 7.1 % | KEV | |
| CVE-2017-12228 | Cisco IOS and IOS XE | A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow | MEDIUM 5.9 | 1.0 % | ||
| CVE-2017-6665 | Cisco IOS and IOS XE | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent | MEDIUM 6.5 | 0.4 % | ||
| CVE-2017-6663 | Cisco IOS and IOS XE | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent | MEDIUM 6.5 | 2.1 % | KEV | |
| CVE-2017-3863 | Cisco IOS and IOS XE | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow | HIGH 8.6 | 2.8 % | ||
| CVE-2017-3862 | Cisco IOS and IOS XE | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow | HIGH 8.6 | 2.8 % | ||
| CVE-2017-3861 | Cisco IOS and IOS XE | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow | HIGH 8.6 | 2.8 % | ||
| CVE-2017-3860 | Cisco IOS and IOS XE | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow | HIGH 8.6 | 2.8 % | ||
| CVE-2017-3864 | Cisco IOS and IOS XE | A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could | HIGH 8.6 | 2.7 % | ||
| CVE-2017-3857 | Cisco IOS and IOS XE | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco I | HIGH 7.5 | 2.6 % | ||
| CVE-2017-3850 | Cisco IOS and IOS XE | A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software | MEDIUM 5.9 | 2.5 % | ||
| CVE-2017-3849 | Cisco IOS and IOS XE | A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Ci | HIGH 7.4 | 0.8 % |