Known vulnerabilities in Cisco IOS 15.2(2)ea

Software: Cisco IOS
Version: 15.2(2)ea
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco IOS version 15.2(2)ea Cisco IOS 15.2(2)ea is affected by 24 vulnerabilities: 2 high, 11 medium, 11 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103680 - Error Handling
CVE-2025-20174
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103681 - Error Handling
CVE-2025-20175
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103682 - Error Handling
CVE-2025-20176
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103675 - Error Handling
CVE-2025-20169
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103676 - Error Handling
CVE-2025-20170
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103677 - Error Handling
CVE-2025-20171
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103678 - Error Handling
CVE-2025-20172
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103679 - Error Handling
CVE-2025-20173
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU24161 - Cross-Site Request Forgery (CSRF)
CVE-2019-16009
CWE-352 Low
No
No
16.1.1 09.01.2020 SB2020010912
#VU21351 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12668
CWE-79 Low
No
No
- 26.09.2019 SB2019092522
#VU8686 - Improper input validation
CVE-2017-12231
CWE-20 Low
No
Exploited
- 04.10.2017 SB2017100403
#VU8685 - Improper input validation
CVE-2017-12234
CWE-20 Low
No
Exploited
- 04.10.2017 SB2017100403
#VU8684 - Improper input validation
CVE-2017-12233
CWE-20 Low
No
Exploited
- 04.10.2017 SB2017100403
#VU8683 - Buffer overflow
CVE-2017-12240
CWE-120 High
No
Exploited
- 04.10.2017 SB2017100403
SB2017100404
#VU8682 - Improper input validation
CVE-2017-12237
CWE-20 Low
No
Exploited
- 04.10.2017 SB2017100403
SB2017100404
#VU8681 - Improper Certificate Validation
CVE-2017-12228
CWE-295 Low
No
No
- 04.10.2017 SB2017100403
SB2017100404
#VU6165 - Improper input validation
CVE-2017-3864
CWE-20 Medium
No
No
- 23.03.2017 SB2017032204
#VU6162 - Improper input validation
CVE-2017-3857
CWE-20 Medium
No
No
- 23.03.2017 SB2017032302
#VU6158 - Improper input validation
CVE-2017-3849
CWE-20 Medium
No
No
- 22.03.2017 SB2017032201
#VU630 - Improper input validation
CVE-2016-6410
CWE-20 Low
No
No
- 22.09.2016 SB2016092103


Showing elements 1 - 20 out of 24