Known vulnerabilities in 4000 Series Integrated Services Routers

Vendor: Cisco Systems, Inc
Software: 4000 Series Integrated Services Routers
Software CPE: cpe:2.3:h:cisco_systems:4000_series_integrated_services_routers:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting 4000 Series Integrated Services Routers 4000 Series Integrated Services Routers is affected by 30 known vulnerabilities: 2 high, 11 medium, 17 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116110 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-20314		 CWE-22 Low
No
No
 - 25.09.2025 SB2025092532
#VU116109 - Improper Handling of Undefined Values
CVE-2025-20313		 CWE-232 Low
No
No
 - 25.09.2025 SB2025092532
#VU116105 - Buffer Access with Incorrect Length Value
CVE-2025-20315		 CWE-805 Medium
No
No
 - 25.09.2025 SB2025092528
#VU97733 - Heap-based Buffer Overflow
CVE-2024-20508		 CWE-122 Medium
No
No
 - 26.09.2024 SB2024092666
#VU89834 - Authentication Bypass by Spoofing
CVE-2024-20363		 CWE-290 Medium
No
No
 - 27.05.2024 SB2024052726
#VU82709 - Business Logic Errors (3.0)
CVE-2023-20246		 CWE-840 Medium
No
No
 - 03.11.2023 SB2023110326
#VU82708 - Security Features
CVE-2023-20071		 CWE-254 Medium
No
No
 - 03.11.2023 SB2023110325
#VU81249 - Error Handling
CVE-2023-20227		 CWE-388 Medium
No
No
 - 28.09.2023 SB2023092819
#VU73988 - Improper input validation
CVE-2023-20027		 CWE-20 High
No
No
 - 23.03.2023 SB2023032344
#VU73987 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20035		 CWE-78 Low
No
No
 - 23.03.2023 SB2023032342
#VU62336 - Permissions, Privileges, and Access Controls
CVE-2022-20727		 CWE-264 Low
No
No
 - 14.04.2022 SB2022041415
#VU62335 - Improper input validation
CVE-2022-20726		 CWE-20 Medium
No
No
 - 14.04.2022 SB2022041415
#VU62334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20725		 CWE-79 Low
No
No
 - 14.04.2022 SB2022041415
#VU62333 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-20724		 CWE-362 Medium
No
No
 - 14.04.2022 SB2022041415
#VU62332 - Execution with Unnecessary Privileges
CVE-2022-20723		 CWE-250 Low
No
No
 - 14.04.2022 SB2022041415
#VU62331 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20722		 CWE-22 Low
No
No
 - 14.04.2022 SB2022041415
#VU62330 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20721		 CWE-22 Low
No
No
 - 14.04.2022 SB2022041415
#VU62329 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20720		 CWE-22 Low
No
No
 - 14.04.2022 SB2022041415
#VU62328 - Execution with Unnecessary Privileges
CVE-2022-20719		 CWE-250 Low
No
No
 - 14.04.2022 SB2022041415
#VU62326 - Execution with Unnecessary Privileges
CVE-2022-20677		 CWE-250 Low
No
No
 - 14.04.2022 SB2022041416


Showing elements 1 - 20 out of 30