Cisco IOS
39 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-20301 | 15.2(7)E7 ; 15.2(8)E3 ; 15.7(3)M10 ; … | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20125 | 12.2(33)CY ; 12.2(33)CY1 ; 12.2(33)CY2 ; … | A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote a | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20012 | 15.2(1)S ; 15.2(2)S ; 15.2(1)S1 ; … | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall A | HIGH 8.6 | 0.4 % | ||
| CVE-2025-20363 | 12.2(15)B ; 12.2(16)B1 ; 12.2(16)B2 ; … | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defens | CRITICAL 9.0 | 6.9 % | ||
| CVE-2025-20149 | 15.2(1)S ; 15.2(2)S ; 15.2(1)S1 ; … | A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-20327 | 15.2(6)E2 ; 15.2(7)E ; 15.2(6)E2a ; … | A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of s | HIGH 7.7 | 0.4 % | ||
| CVE-2025-20352 | 12.2(55)SE ; 12.2(55)SE3 ; 12.2(55)SE2 ; … | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the f | HIGH 7.7 | 42 % | KEV | |
| CVE-2025-20160 | 15.2(6)E1 ; 15.2(4)E6 ; 15.2(6)E2 ; … | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated | HIGH 8.1 | 0.4 % | ||
| CVE-2025-20239 | 15.2(4)E ; 15.2(4)E1 ; 15.2(4)E2 ; … | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Secu | HIGH 8.6 | 0.6 % | ||
| CVE-2025-20225 | 15.1(2)T ; 15.1(1)T4 ; 15.1(3)T2 ; … | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Secu | MEDIUM 5.8 | 0.7 % | ||
| CVE-2025-20196 | N/A | A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-20164 | 15.0(2)SE8 ; 15.0(2)EA ; 15.0(2)EA1 ; … | A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attac | HIGH 8.3 | 0.3 % | ||
| CVE-2025-20181 | 15.0(1)XO1 ; 15.0(1)XO ; 15.0(2)XO ; … | A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, loc | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-20137 | 15.2(5a)E ; 15.2(5b)E ; 15.2(5c)E ; … | A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco | MEDIUM 4.7 | 0.3 % | ||
| CVE-2025-20169 | 12.2(4)B ; 12.2(15)B ; 12.2(16)B1 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20175 | 12.2(53)SE1 ; 12.2(55)SE ; 12.2(50)SE2 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20174 | 15.4(1)T ; 15.4(2)T ; 15.4(1)T2 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20170 | 12.2(4)B ; 12.2(15)B ; 12.2(16)B1 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20171 | 12.2(33)CX ; 12.2(33)CY ; 12.2(33)CY1 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20176 | 15.0(2)EY ; 15.0(2)EY1 ; 15.0(2)EY2 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20172 | 12.2(33)SRE1 ; 12.2(33)SRE2 ; 12.2(33)SRE3 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20173 | 12.2(53)SE1 ; 12.2(55)SE ; 12.2(50)SE2 ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2024-20414 | 15.2(6)E2 ; 15.2(7)E ; 15.2(6)E2a ; … | A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to con | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-20465 | 15.2(8)E2 ; 15.2(8)E3 ; 15.2(8)E4 ; … | A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 | MEDIUM 5.8 | 0.4 % | ||
| CVE-2024-20433 | 12.0(24)S ; 12.0(25)S ; 12.0(26)S ; … | A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthent | HIGH 8.6 | 0.6 % | ||
| CVE-2024-20307 | 15.1(2)SG8 ; 15.2(4)M11 ; 15.1(2)SY8 ; … | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attac | HIGH 7.5 | 0.7 % | ||
| CVE-2024-20308 | 12.4(24)T ; 12.4(24)T3 ; 12.4(22)T1 ; … | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attac | HIGH 8.6 | 0.8 % | ||
| CVE-2024-20312 | 15.2(1)S ; 15.2(2)S ; 15.2(1)S1 ; … | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could all | HIGH 7.4 | 0.3 % | ||
| CVE-2024-20276 | 15.5(1)SY5 ; 15.5(1)SY6 ; 15.5(1)SY7 ; … | A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an | HIGH 7.4 | 0.3 % | ||
| CVE-2024-20311 | 15.1(1)XB ; 15.2(1)S ; 15.2(2)S ; … | A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthen | HIGH 8.6 | 0.8 % | ||
| CVE-2023-20109 | 12.4(24)T ; 12.4(24)T3 ; 12.4(22)T1 ; … | A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an | MEDIUM 6.6 | 2.5 % | KEV | |
| CVE-2023-20186 | 12.2(58)SE ; 12.2(58)SE1 ; 12.2(58)SE2 ; … | A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could all | CRITICAL 9.1 | 0.8 % | ||
| CVE-2011-4661 | before 15.2(1)T | A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when | HIGH 7.5 | 1.0 % | ||
| CVE-2017-6744 | 12.1(3)XI ; 12.2(1b)DA ; 12.2(5)DA ; … | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow | HIGH 8.8 | 7.3 % | KEV | |
| CVE-2017-6743 | 12.1(3)XI ; 12.2(1b)DA ; 12.2(5)DA ; … | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow | HIGH 8.8 | 11 % | KEV | |
| CVE-2017-6740 | 12.2(14)ZA ; 12.2(14)ZA3 ; 12.2(14)ZA2 ; … | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow | HIGH 8.8 | 11 % | KEV | |
| CVE-2017-6738 | 12.2(53)SE1 ; 12.2(55)SE ; 12.2(50)SE2 ; … | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow | HIGH 8.8 | 11 % | KEV | |
| CVE-2017-6737 | 12.1(3)XI ; 12.2(4)B ; 12.2(15)B ; … | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r | HIGH 8.8 | 45 % | KEV | |
| CVE-2017-6736 | 12.1(3a)XI9 ; 12.1(3)XI ; 12.1(3a)XI8 ; … | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow | HIGH 8.8 | 70 % | KEV |