Known vulnerabilities in Cisco IOS - page 2

Software: Cisco IOS
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 87
Public exploits: 4
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS Cisco IOS is affected by 87 known vulnerabilities: 2 critical, 18 high, 31 medium, 36 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67728 - Improper Handling of Exceptional Conditions
CVE-2022-20920
CWE-755 Medium
No
No
ap-17.3.6.7, ap-17.3.6.76, ap-17.6.3.27, ap-17.6.3.33, ap-17.8.0.121, ap-17.8.0.144, ap-17.9.0.56, ap-17.9.1.8, 008.010(178.017), 15.3(03)JPM, 15.5(1)SY10, 15.8(03)M09, 15.9(3)M6, 16.12(5.73), 16.12.6, 16.12.6a, 16.12.7, 16.12.8, 17.3.5b, 17.3(5.89), 17.3.6, 17.6(0.83), 17.6.1, 17.6.1w, 17.6.1x, 17.6.1y, 17.6.1z, 17.6.1a, 17.6.2, 17.6.3, 17.6.3a, 17.6.4, 17.7.1, 17.7.1a, 17.7.2, 17.8.1, 17.8.1a, 17.9.1, 17.9.1a 29.09.2022 SB2022092914
#VU62354 - Active Debug Code
CVE-2022-20731
CWE-489 Low
No
No
15.2(7)E5 15.04.2022 SB2022041512
#VU62353 - Active Debug Code
CVE-2022-20661
CWE-489 Low
No
No
15.2(7)E5, 15.2(8)E1 15.04.2022 SB2022041512
#VU62352 - Insufficient Control Flow Management
CVE-2022-20697
CWE-691 High
No
No
15.2(7)E5, 15.2(8)E1, 15.9(03.00a)M4, 15.9(3)M4a 15.04.2022 SB2022041511
#VU62341 - Uncaught Exception
CVE-2022-20761
CWE-248 Low
No
No
- 14.04.2022 SB2022041421
#VU62336 - Permissions, Privileges, and Access Controls
CVE-2022-20727
CWE-264 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62335 - Improper input validation
CVE-2022-20726
CWE-20 Medium
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20725
CWE-79 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62333 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-20724
CWE-362 Medium
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62332 - Execution with Unnecessary Privileges
CVE-2022-20723
CWE-250 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62331 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20722
CWE-22 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62330 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20721
CWE-22 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62329 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20720
CWE-22 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62328 - Execution with Unnecessary Privileges
CVE-2022-20719
CWE-250 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62327 - Command injection
CVE-2022-20718
CWE-77 Low
No
No
15.9(3)M5 14.04.2022 SB2022041415
#VU62326 - Execution with Unnecessary Privileges
CVE-2022-20677
CWE-250 Low
No
No
15.9(3)M5 14.04.2022 SB2022041416
#VU56875 - Improper input validation
CVE-2021-34714
CWE-20 Medium
No
No
16.9.8, 16.12.5, 16.12.5 b, 16.12.6, 17.3.3, 17.3.4, 17.5.1, 17.6.1 24.09.2021 SB2021092427
#VU56873 - Improper Interaction Between Multiple Correctly-Behaving Entities
CVE-2021-34699
CWE-435 Medium
No
No
16.9.8, 16.12.6, 17.3.4, 17.6.1 24.09.2021 SB2021092425
#VU56864 - Missing Initialization of a Variable
CVE-2021-34703
CWE-456 Low
No
No
16.6.10, 16.9.8, 16.12.5, 16.12.5 b, 16.12.6 24.09.2021 SB2021092416
#VU56842 - Improper input validation
CVE-2021-1620
CWE-20 Medium
No
No
16.9.8, 16.12.6, 17.3.4, 17.5.1, 17.6.1 23.09.2021 SB2021092313


Showing elements 21 - 40 out of 87