Cisco

Records7060All Threatist records

Exploited (KEV)107In CISA KEV

CVSS critical694CVSS 9.0–10.0

CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CRITICAL 94KEV 2026-10-29 TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CRITICAL 100KEV 2026-10-14 TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CRITICAL 100KEV 2026-09-30 TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 100KEV 2026-09-16 TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability CRITICAL 100KEV 2026-09-14 TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records

Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

14 records in Asr 1001 · all components

TI-2013-04740 CVE-2013-5547 · GHSA-7657-fh3j-xfj4

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a…

LOW 38

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malformed EoGRE packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuf08269.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01906 Published 2013-10-31 No fix listed CWE-20

TI-2013-04739 CVE-2013-5546 · GHSA-cq3m-3v79-qmrp

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on…

LOW 38

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via large TCP packets that are processed by the…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0189 Published 2013-10-31 No fix listed CWE-20

TI-2013-04738 CVE-2013-5545 · GHSA-2r8v-24rx-6584

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows…

LOW 38

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending many PPTP packets over NAT, aka Bug ID CSCuh19936.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0189 Published 2013-10-31 No fix listed CWE-20

TI-2013-04736 CVE-2013-5543 · GHSA-hxjm-hq6x-h7px

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote…

LOW 38

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP or (2) UDP session…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0189 Published 2013-10-31 No fix listed CWE-20

TI-2013-02427 CVE-2013-2779 · GHSA-42fj-5wgr-vp3x

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series…

LOW 38

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows r…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01962 Published 2013-04-11 No fix listed CWE-20

TI-2013-01013 CVE-2013-1166 · GHSA-vrc2-g3wg-h66r

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000…

LOW 38

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of s…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0189 Published 2013-04-11 No fix listed CWE-20

TI-2013-01012 CVE-2013-1165 · GHSA-qrxq-xh34-vw6w

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series…

LOW 38

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by sending many crafted L2TP…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0189 Published 2013-04-11 No fix listed CWE-20

TI-2013-01011 CVE-2013-1164 · GHSA-r6qj-7q64-h7gp

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers…

LOW 38

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cau…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01906 Published 2013-04-11 No fix listed

TI-2013-01014 CVE-2013-1167 · GHSA-j4xj-pqpq-7cfq

Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services…

LOW 35

Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of service (card reload) vi…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.0196 Published 2013-04-11 No fix listed CWE-22

TI-2012-04236 CVE-2012-5017 · GHSA-jh5p-g73f-c3cw

Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of…

LOW 33

Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01536 Published 2014-04-23 No fix listed CWE-20

TI-2014-01729 CVE-2014-2183 · GHSA-g543-f6ff-6mj2

The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote…

LOW 31

The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.

CVSS 2.0MEDIUM 6.3 Network Low privileges Interaction — EPSS 0.01319 Published 2014-04-29 No fix listed CWE-20

TI-2014-02620 CVE-2014-3284 · GHSA-88gh-c867-76x4

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote…

LOW 30

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.01207 Published 2014-05-25 No fix listed CWE-20

TI-2012-04804 CVE-2012-5723 · GHSA-q7c6-x96r-hrg8

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow…

LOW 28

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentatio…

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.00712 Published 2014-04-24 No fix listed CWE-20

TI-2012-01201 CVE-2012-1366 · GHSA-722r-v4g4-4887

Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD)…

LOW 28

Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug…

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.00718 Published 2014-04-23 No fix listed CWE-20

Open these records in search →

Critical	694
High	2793
Medium	3496
Low	75
No CVSS	2