Known vulnerabilities in Cisco IOS - page 4

Software: Cisco IOS
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 87
Public exploits: 4
Known exploited (KEV): 18

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS Cisco IOS is affected by 87 known vulnerabilities: 2 critical, 18 high, 31 medium, 36 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51768 - Insufficiently Protected Credentials
CVE-2021-1392
CWE-522 Low
No
No
8.5.164.27, 8.5.171.0, 15.2(7)E4, 15.2(7.0.16j)E4, 15.2(7.1.0p)E4, 15.3.3 JF14, 16.12.4.40, 16.12.5, 16.12.5a, 17.1.3, 17.2.1.177, 17.3.0.188, 17.3.1, 17.3.1a, 17.3.1w, 17.3.1x, 17.3.2, 17.3.2a, 17.3.3, 17.4.0.56, 17.4.1, 17.4.1a, 17.4.1b 29.03.2021 SB2021032917
SB2021042150
#VU51765 - Active Debug Code
CVE-2021-1391
CWE-489 Low
No
No
15.2(7)E4, 15.2(7.1.0p)E4, 15.2(8.0.18p)E, 15.2(8.0.28j)E, 16.9.6.123, 16.9.7, 16.12.3.49, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 17.1.3, 17.3.0.188, 17.3.1, 17.3.1a, 17.3.1w, 17.3.1x, 17.3.2, 17.3.2a, 17.3.3, 17.4.0.56, 17.4.1, 17.4.1a, 17.4.1b 29.03.2021 SB2021032914
#VU51731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-1385
CWE-22 Low
No
No
15.8.3 M2, 15.9.3 M4 25.03.2021 SB2021032517
SB2022110109
#VU47110 - Improper input validation
CVE-2020-3512
CWE-20 Medium
No
No
- 24.09.2020 SB2020092503
#VU47236 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3477
CWE-200 Low
No
No
17.2.1, 17.2.1EFT, 17.2.2, 17.3.1, 17.3.1EFT, 17.3.1a, 17.3.2EFT 24.09.2020 SB2020100108
#VU24161 - Cross-Site Request Forgery (CSRF)
CVE-2019-16009
CWE-352 Low
No
No
16.1.1 09.01.2020 SB2020010912
#VU21351 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12668
CWE-79 Low
No
No
- 26.09.2019 SB2019092522
#VU7297 - Buffer overflow
CVE-2017-6743
CWE-120 High
No
Exploited
- 03.07.2017 SB2017070303
SB2017082503
#VU7296 - Buffer overflow
CVE-2017-6742
CWE-120 High
No
Exploited
- 03.07.2017 SB2017070303
SB2017082503
#VU7295 - Buffer overflow
CVE-2017-6741
CWE-120 High
No
No
- 03.07.2017 SB2017070303
SB2017082503
#VU7294 - Buffer overflow
CVE-2017-6740
CWE-120 High
No
Exploited
- 03.07.2017 SB2017070303
SB2017082503
#VU7293 - Buffer overflow
CVE-2017-6739
CWE-120 High
No
Exploited
- 03.07.2017 SB2017070303
SB2017082503
#VU7292 - Buffer overflow
CVE-2017-6738
CWE-120 High
No
Exploited
- 03.07.2017 SB2017070303
SB2017082503
#VU7291 - Buffer overflow
CVE-2017-6737
CWE-120 High
No
Exploited
- 03.07.2017 SB2017070303
SB2017082503
#VU7290 - Buffer overflow
CVE-2017-6736
CWE-120 High
Available
Exploited
- 03.07.2017 SB2017070303
SB2017082503
#VU6165 - Improper input validation
CVE-2017-3864
CWE-20 Medium
No
No
- 23.03.2017 SB2017032204
#VU647 - Improper input validation
CVE-2016-6412
CWE-20 Low
No
No
- 23.09.2016 SB2016092103
#VU630 - Improper input validation
CVE-2016-6410
CWE-20 Low
No
No
- 22.09.2016 SB2016092103
#VU629 - Resource Management Errors
CVE-2016-6409
CWE-399 Low
No
No
- 22.09.2016 SB2016092103
#VU628 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2016-6414
CWE-78 Low
No
No
- 22.09.2016 SB2016092103


Showing elements 61 - 80 out of 87