Known vulnerabilities in Cisco IOS
Vendor:
Cisco Systems, Inc
Software:
Cisco IOS
Software CPE:
cpe:2.3:o:cisco_systems:cisco_ios:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
87
Public exploits:
4
Known exploited (KEV):
18
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
15.2(7)E14
15.9(3)M12
15.2(7)E13
15.2(8)E8
15.2(7)E12
15.9(3)M11
15.5(1)SY14
15.5(1)SY13
15.5(1)SY12
15.5(1)SY11
15.9(3)M10
15.9(3)M9
15.9(3)M8b
15.9(3)M8
15.9(3)M7a
15.9(3)M7
15.9(3)M6b
15.9(3)M6a
15.9(3)M2a
15.9(3)M2
15.9(3)M
15.8(3)M3
15.8(3)M2a
15.8(3)M0a
15.8(3)M
15.7(3)M4b
15.7(3)M2
15.7(3)M1
15.7(3)M0a
15.7(3)M
15.6(3)M6b
15.6(3)M3
15.6(3)M2
15.6(3)M1b
15.6(3)M0a
15.6(3)M
15.6(2)T
15.6(1)T
15.5(3)M0a
15.4(1)SY4
15.4(1)SY3
15.4(1)SY2
15.4(1)SY1
15.4(1)SY
15.3(1)SY2
15.3(1)SY1
15.3(1)SY
15.2(2)SY3
15.2(2)SY2
15.2(2)SY1
15.2(2)SY
15.2(1)SY8
15.2(1)SY7
15.2(1)SY6
15.2(1)SY5
15.2(1)SY4
15.2(1)SY3
15.2(1)SY2
15.2(1)SY1a
15.2(1)SY1
15.2(1)SY0a
15.2(1)SY
15.1SY
15.1(2)SY15
15.1(2)SY14
15.1(2)SY13
15.1(2)SY12
15.1(2)SY11
15.1(2)SY10
15.1(2)SY9
15.1(2)SY8
15.1(2)SY7
15.1(2)SY6
15.1(2)SY5
15.1(2)SY4a
15.1(2)SY4
15.1(2)SY3
15.1(2)SY2
15.1(2)SY1
15.1(2)SY
15.1(1)SY6
15.1(1)SY5
15.1(1)SY4
15.1(1)SY3
15.1(1)SY2
15.1(1)SY1
15.1(1)SY
15.2(8)Ex
15.2(8)E7
15.2(8)E6
15.2(8)E5
15.2(8)E4
15.2(8)E3
15.2(7)E1
15.2(7)E11
15.2(7)E10
15.2(7)E9
15.2(7)E8
15.2(7)E6
15.2(7)E3k
15.2(7)Ex
15.2(4)EA5
15.2(6)E2b
15.2(6)Ex
15.2(6)E3
15.2(6)E2
15.2(6)E1
15.2(5b)E
15.2(5)E2
15.2(5)E1
15.2(4)Ex
15.2(4)E10a
15.2(3)Ex
15.2(2)Ex
15.2(4)EA4
15.2(4)EA3
15.2(4)EA2
15.2(4)EA1
15.2(4)E9
15.2(4)E8
15.2(4)E7
15.2(4)E6
15.2(4)E5
15.2(4)E4
15.2(4)E3
15.2(4)E2
15.2(4)E1
15.2(3)E3
15.2(3)E2
15.2(3)E1
15.2(2)E10
15.2(2)E9
15.2(2)E8
15.2(2)E7
15.2(2)E6
15.2(2)E5a
15.2(2)E5
15.2(2)E4
15.2(2)E3
15.2(2)E2
15.2(2)E1
17.11.1a
16.12.10a
17.12.1a
17.12.1w
17.12.1x
17.12.2a
17.12.3
17.13.1
17.13.1a
17.3.8a
17.6.6a
17.9.1y1
17.9.4a
17.9.5
17.9.5a
17.3.8
17.6.6
17.12.2
17.11.1
17.3.7
16.12.10
17.12.1
17.9.1y
17.9.4
15.2(04)E10d
15.2(7)E7
16.12(6.165)
17.10.1
17.10.1a
17.10.1b
17.3(3.8)
17.5(0.143)
17.5.1b
17.6(0.18)
17.6.1z1
17.6.5
17.9.1w
17.9.1x
17.9.1x1
17.9.2
17.9.2a
17.9.3
008.005(161.102)
008.005(162.107)
008.005(164.000)
008.005(164.008)
008.008(128.041)
008.008(130.000)
008.010(105.146)
008.010(112.102)
008.010(113.000)
008.010(118.084)
008.010(121.000)
008.010(128.055)
008.010(130.000)
15.0(02)SE13a
15.1(2)SY17
15.1(2)SY16
15.2(04)E10
15.2(7)E2
15.2(7)E3
15.2(07.00.59i)E2
15.2(07.00.87i)E2
15.2(07.01.03s)E1
15.2(07.01.62k)E1
15.2(07.01.78i)E3
15.2(07.02.00l)E4
15.2(7b)E00b
15.3(03)JF12i
15.3(03)JI06
15.3(03)JK01t
15.3(03)JK02
15.3(03)JK02a
15.3(03)JK05
15.3(03)JPI06a
15.3(03)JPJ02t
15.3(03)JPJ03
15.3(03)JPJ06
15.5(1)IA001.1211
15.5(1)SY5
15.5(1)SY6
15.5(01.01.10)SY04
15.5(3)M11
15.5(3)S10a
15.6(02)SP08
15.6(02.01)SP09
15.6(03)M08
15.7(03)M06
15.7(03.00q)M05
15.8(03)M04
15.8(03.00d)M03
15.8(03.01s)M01
15.9(3)M1
16.12(0.141)
16.12(1.2)
16.12.1z1
16.12.1z2
16.6(6.82)
16.6.7a
16.6.8
16.9(3.60)
17.1(0.35)
17.2.3
17.3.1z
17.3.4a
17.3.4b
17.3.4c
17.3.5
17.3.5a
17.4.2
17.5.1a
16.6.7
16.12.1b
16.12.1d
16.12.1e
ap-16.12.4.9
ap-16.12.4a
ap-17.1.1.30
ap-17.1.1t
ap-17.2.0.78
ap-17.2.1
ap-17.2.1.4
ap-17.3.0.42
ap-17.3.1
15.2(8)E2
17.3(5.83)
17.6(3.17)
17.9(0.6)
008.010(178.017)
15.3(03)JPM
15.5(1)SY10
15.8(03)M09
15.9(3)M6
16.12(5.73)
16.12.6a
16.12.7
16.12.8
17.3(5.89)
17.3.5b
17.6(0.83)
17.6.1a
17.6.1w
17.6.1x
17.6.1y
17.6.1z
17.6.2
17.6.3a
17.6.4
17.7.1
17.7.1a
17.7.2
17.8.1a
17.9.1a
17.3.6
17.6.3
17.8.1
17.9.1
ap-17.3.6.7
ap-17.3.6.76
ap-17.6.3.27
ap-17.6.3.33
ap-17.8.0.121
ap-17.8.0.144
ap-17.9.0.56
ap-17.9.1.8
15.7(03)M03
15.2(8)E
15.9(03.00S)GB01
15.9(03.00c)M2
15.2(7)E5
15.2(8)E1
15.9(3)M4a
15.9(03.00a)M4
15.9(03.00b)M3
1.15.0.1
15.9(3)M5
16.6.10
16.12.5b
16.9.8
15.1(4)M
16.12.6
17.3.4
17.5.1
17.6.1
15.2(2)E10a
15.2(4)E10b
15.2(8.0.6p)E
15.2(8.0.13j)E
15.5(1)SY7
15.5(1.0.17)SY6
15.7(3)M8
15.8(3)M6
15.8(3.0u)M4
15.9(3)M3
15.9(3.0p)M2
16.3.5a
16.3.5
16.3.5c
16.3.5b
16.3.6
16.3.7
16.3.8
16.3.9
16.3.10
16.6.9
16.7.1a
16.7.1
16.7.1b
16.7.2
16.7.3
16.7.4
16.8.1b
16.8.1a
16.8.1
16.8.1s
16.8.1e
16.8.1d
16.8.1c
16.8.2
16.8.3
16.9.1
16.9.1s
16.9.1d
16.9.1c
16.9.1b
16.9.1a
16.9.2
16.9.2s
16.9.2a
16.9.3s
16.9.3h
16.9.3a
16.9.3
16.9.4c
16.9.4
16.9.5f
16.9.5
16.9(6.56)
16.9.6
16.10.1i
16.10.1g
16.10.1f
16.10.1e
16.10.1d
16.10.1c
16.10.1b
16.10.1a
16.10.1s
16.10.2
16.10.3
16.11.1a
16.11.1s
16.11.1c
16.11.1b
16.11.2
16.12.1t
16.12.1s
16.12.1c
16.12.1a
16.12.1y
16.12.1x
16.12.1w
16.12.2t
16.12.2s
16.12.2a
16.12.3
17.1.1a
17.1.1t
17.1.1s
17.1.2
17.2(1.126)
17.2.1r
17.2.1a
17.2.1v
17.3(2.1)
17.3.3a
17.4(0.145)
17.5(0.40)
15.5(1.0.1)SY5
8.5(164.27)
8.5(171.0)
15.2(7.0.16j)E4
15.3(3)JF14
16.12(4.40)
17.2(1.177)
Gibraltar-16.12.5
17.1.1
15.2(7)E4
15.2(7.1.0p)E4
15.2(8.0.18p)E
15.2(8.0.28j)E
16.9(6.123)
16.12(3.49)
16.12.5a
16.12.5
17.3(0.188)
17.3.1x
17.3.1w
17.3.2a
17.3.2
17.3.3
17.4(0.56)
17.4.1a
17.4.1b
17.1.3
17.4.1
16.9.7
Gibraltar-16.12.4
15.8(3)M2
15.9(3)M4
12.2(33)SXJ1
17.2.1EFT
17.2.1
17.2.2
17.3.1
17.3.1a
17.3.1EFT
17.3.2EFT
16.3.11
16.12.1z
16.12(3.7)
16.12.3s
16.12.3a
16.12.4a
16.12.4
16.12.2
16.12.1
16.1.1
16.11.1
16.10.1
15.2(5)EX
15.2(5)EA
15.2(4)EC
15.2(3)EA
15.2(7)E
15.2(6)E
15.2(4)E
15.2(3)E
15.2(2)E
15.8(3)M1
15.8(3.1s)M
16.6(4.12)
16.6.5
16.6.4
16.6.2
15.3(3)JA12
15.2(5)E
15.1(2.0)
15.6(1)T0.1
12.4(24)T4
15.5(3)S
16.5(1)
15.6(3)M1
15.5(3)M
15.4(2)S
15.4(1)S2
15.4(1)S1.1
15.4(1)S
15.1
15.0
15.6T
15.6SP
15.6SN
15.6S
15.6M
15.5SN
15.5S
15.4S
15.3S
15.2EA
15.2E
15.4
15.3
15.5(1)S3.1
15.2(5c)E
15.6(2)SP
15.5(3)S2.9
12.2(33)
12.4
12.3
12.0
12.2
12.1
15.2(2)ea
15.2(4)ea
15.2(2)ea2
15.2(2)ea1
15.2(2)eb
15.2(2)eb1
Vulnerabilities (87)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU116111 - Improper input validation CVE-2025-20327 |
CWE-20 | Medium | - | 25.09.2025 |
SB2025092537 |
||
| #VU108841 - Buffer Access with Incorrect Length Value CVE-2025-20191 |
CWE-805 | Medium | - | 09.05.2025 |
SB2025050948 |
||
| #VU108838 - Configuration CVE-2025-20151 |
CWE-16 | Medium | - | 09.05.2025 |
SB2025050935 |
||
| #VU103680 - Error Handling CVE-2025-20174 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103681 - Error Handling CVE-2025-20175 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103682 - Error Handling CVE-2025-20176 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103675 - Error Handling CVE-2025-20169 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103676 - Error Handling CVE-2025-20170 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103677 - Error Handling CVE-2025-20171 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103678 - Error Handling CVE-2025-20172 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103679 - Error Handling CVE-2025-20173 |
CWE-388 | Medium | - | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU97723 - Improper Access Control CVE-2024-20465 |
CWE-284 | Medium | - | 26.09.2024 |
SB2024092627 |
||
| #VU88807 - Improper Access Control CVE-2024-20373 |
CWE-284 | Medium | 17.6.6, 17.6.6a, 17.9.4, 17.9.5, 17.9.5a, 17.11.1, 17.11.1a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.3, 17.13.1, 17.13.1a | 18.04.2024 |
SB2024041821 |
||
| #VU87897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-20308 |
CWE-124 | High | 16.12.10, 16.12.10a, 17.3.8, 17.3.8a, 17.6.6, 17.6.6a, 17.9.1y1, 17.9.4, 17.9.4a, 17.9.5, 17.9.5a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.3, 17.13.1, 17.13.1a | 28.03.2024 |
SB2024032817 |
||
| #VU87896 - Heap-based Buffer Overflow CVE-2024-20307 |
CWE-122 | Medium | 16.12.10, 16.12.10a, 17.3.8, 17.3.8a, 17.6.6, 17.6.6a, 17.9.1y1, 17.9.4, 17.9.4a, 17.9.5, 17.9.5a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.3, 17.13.1, 17.13.1a | 28.03.2024 |
SB2024032817 |
||
| #VU81270 - Out-of-bounds write CVE-2023-20109 |
CWE-787 | High | 16.12.10, 17.3.7, 17.9.1y, 17.9.3, 17.9.4, 17.11.1, 17.12.1 | 29.09.2023 |
SB2023092914 |
||
| #VU81248 - Improper Authorization CVE-2023-20186 |
CWE-285 | Low | 16.12.10, 17.9.1y, 17.9.4, 17.12.1 | 28.09.2023 |
SB2023092818 |
||
| #VU73983 - Improper input validation CVE-2023-20080 |
CWE-20 | High | 15.2(04)E10d, 15.2(7)E7, 15.8(03)M09, 15.9(3)M6, 16.12(6.165), 16.12.8, 17.3(3.8), 17.3.4, 17.3.4c, 17.3.4a, 17.3.4b, 17.3.5, 17.3.5a, 17.3.5b, 17.3.6, 17.5(0.143), 17.5.1, 17.5.1a, 17.5.1b, 17.6(0.18), 17.6.1, 17.6.1w, 17.6.1x, 17.6.1y, 17.6.1z, 17.6.1z1, 17.6.1a, 17.6.2, 17.6.3, 17.6.3a, 17.6.4, 17.6.5, 17.7.1, 17.7.1a, 17.7.2, 17.8.1, 17.8.1a, 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.10.1, 17.10.1a, 17.10.1b | 23.03.2023 |
SB2023032333 |
||
| #VU73980 - Improper input validation CVE-2023-20081 |
CWE-20 | Medium | - | 23.03.2023 |
SB2023032325 |
||
| #VU67737 - Uncaught Exception CVE-2022-20919 |
CWE-248 | High | 15.2(8)E2, 16.12.8, 17.3(5.83), 17.3.6, 17.6.1z, 17.6(3.17), 17.6.4, 17.9(0.6), 17.9.1, 17.9.1a | 29.09.2022 |
SB2022092919 |
Showing elements 1 - 20 out of 87