Known vulnerabilities in Cisco IOS Software
Vendor:
Cisco Systems, Inc
Software:
Cisco IOS Software
Software CPE:
cpe:2.3:a:cisco_systems:cisco_ios_software:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
16.12.13
17.9.6a
17.9.6b
17.9.7
17.9.7a
17.12.1z2
17.12.1z3
17.12.5
17.12.5a
17.15.1x
17.15.1y
17.15.2
17.15.2a
17.15.2b
17.15.2c
17.15.3
17.16.1
17.16.1a
17.17.1
Cupertino-17.9.6
Dublin-17.12.5
17.14.1
17.14.1a
17.12.2
16.12.12
17.12.1z
17.12.1z1
17.12.4
17.15.1
17.15.1a
17.15.1b
17.6.8
17.9.6
Dublin-17.12.4
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU108835 - Improper input validation CVE-2025-20154 |
CWE-20 | High | Dublin-17.12.5, Cupertino-17.9.6, 16.12.13, 17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.12.1z2, 17.12.1z3, 17.12.5, 17.12.5a, 17.15.1x, 17.15.1y, 17.15.2, 17.15.2c, 17.15.2a, 17.15.2b, 17.15.3, 17.16.1, 17.16.1a, 17.17.1 | 09.05.2025 |
SB2025050934 |
||
| #VU97730 - Cross-Site Request Forgery (CSRF) CVE-2024-20414 |
CWE-352 | Low | 16.12.12, 17.12.1z, 17.12.1z1, 17.12.4, 17.14.1, 17.14.1a, 17.15.1, 17.15.1a | 26.09.2024 |
SB2024092645 |
||
| #VU97729 - Stack-based buffer overflow CVE-2024-20433 |
CWE-121 | High | Dublin-17.12.4, 16.12.12, 17.6.8, 17.9.6, 17.12.1z, 17.12.1z1, 17.12.4, 17.15.1, 17.15.1a, 17.15.1b | 26.09.2024 |
SB2024092643 |