Known vulnerabilities in Cisco Network Convergence System 540 Series Routers

Software CPE: cpe:2.3:h:cisco_systems:cisco_network_convergence_system_540_series_routers:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Network Convergence System 540 Series Routers Cisco Network Convergence System 540 Series Routers is affected by 15 known vulnerabilities: 1 high, 3 medium, 10 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115156 - Improper Verification of Cryptographic Signature
CVE-2025-20248
CWE-347
No
No
- 11.09.2025 SB2025091125
#VU87523 - NULL Pointer Dereference
CVE-2024-20266
CWE-476 Medium
No
No
- 14.03.2024 SB2024031422
#VU87521 - Improper Access Control
CVE-2024-20322
CWE-284 Medium
No
No
- 14.03.2024 SB2024031419
#VU87520 - Improper Access Control
CVE-2024-20315
CWE-284 Medium
No
No
- 14.03.2024 SB2024031418
#VU87518 - Incorrect Privilege Assignment
CVE-2024-20320
CWE-266 Low
No
No
- 14.03.2024 SB2024031424
#VU87514 - Improper Access Control
CVE-2024-20319
CWE-284 Low
No
No
- 14.03.2024 SB2024031425
#VU87513 - Improper Privilege Management
CVE-2024-20262
CWE-269 Low
No
No
- 14.03.2024 SB2024031426
#VU80775 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-20135
CWE-367 Low
No
No
- 14.09.2023 SB2023091421
#VU80767 - Improper Access Control
CVE-2023-20191
CWE-284 High
No
No
- 14.09.2023 SB2023091417
#VU73202 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20064
CWE-200 Low
No
No
- 09.03.2023 SB2023030928
#VU56425 - Improper Verification of Cryptographic Signature
CVE-2021-34709
CWE-347 Low
No
No
7.3.2, 7.4.1 09.09.2021 SB2021090908
#VU56424 - Improper Verification of Cryptographic Signature
CVE-2021-34708
CWE-347 Low
No
No
7.3.2, 7.4.1 09.09.2021 SB2021090908
#VU46251 - Permissions, Privileges, and Access Controls
CVE-2020-3473
CWE-264 Low
No
No
6.6.3, 7.0.2, 7.1.1 03.09.2020 SB2020090310
#VU25028 - Use of Externally-Controlled Format String
CVE-2020-3118
CWE-134 Low
No
Exploited
6.6.3 07.02.2020 SB2020020712
#VU49026 - Integer overflow
CVE-2020-3120
CWE-190 Low
No
No
- 05.02.2020 SB2020020539