Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

618 records in Ios · all components

Priority CRITICAL 100KEV

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (Do…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99479 Published 2018-03-28 No fix listed CWE-20
Priority CRITICAL 100KEV

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affect…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13773 Published 2017-09-28 No fix listed CWE-20
Priority CRITICAL 100KEV

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely ex…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98975 Published 2017-03-17 No fix listed CWE-20
Priority CRITICAL 97KEV

Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03354 Published 2018-03-28 No fix listed CWE-119
TI-2017-04499 CVE-2017-6744 · GHSA-7r2m-r994-47mm

Memory corruption in Cisco IOS

Priority CRITICAL 97KEV

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07292 Published 2017-07-17 No fix listed CWE-119
TI-2017-04498 CVE-2017-6743 · GHSA-6g39-9vj5-c7xv

Memory corruption in Cisco IOS

Priority CRITICAL 97KEV

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.10855 Published 2017-07-17 No fix listed CWE-119
TI-2017-04497 CVE-2017-6742 · GHSA-cw5p-gwrw-rv56

Memory corruption in Cisco IOS XE Software

Priority CRITICAL 97KEV

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.21261 Published 2017-07-17 No fix listed CWE-119
TI-2017-04495 CVE-2017-6740 · GHSA-vmp6-vfp8-8398

Memory corruption in Cisco IOS

Priority CRITICAL 97KEV

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.111 Published 2017-07-17 No fix listed CWE-119
Priority CRITICAL 97KEV

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.10855 Published 2017-07-17 No fix listed CWE-119
TI-2017-04493 CVE-2017-6738 · GHSA-3qj9-m33f-45xw

Memory corruption in Cisco IOS

Priority CRITICAL 97KEV

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.10855 Published 2017-07-17 No fix listed CWE-119
TI-2017-04492 CVE-2017-6737 · GHSA-f29v-pr27-8f5j

Memory corruption in Cisco IOS

Priority CRITICAL 97KEV

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.44964 Published 2017-07-17 No fix listed CWE-119
TI-2017-04491 CVE-2017-6736 · GHSA-7vrx-w4v5-hwph

Memory corruption in Cisco IOS

Priority CRITICAL 97KEV

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.70354 Published 2017-07-17 No fix listed CWE-119
Priority CRITICAL 96KEV

A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote attacker to cause an…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.07608 Published 2018-03-28 No fix listed CWE-20
Priority CRITICAL 96KEV

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a deni…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0782 Published 2018-03-28 No fix listed CWE-20
Priority CRITICAL 94KEV

Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denia…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.03478 Published 2018-03-28 No fix listed CWE-119
Priority CRITICAL 94KEV

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a deni…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.07608 Published 2018-03-28 No fix listed CWE-20
Priority CRITICAL 94KEV

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected devi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0719 Published 2018-03-28 No fix listed CWE-20
Priority CRITICAL 94KEV

A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to c…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.07742 Published 2018-03-28 No fix listed CWE-388
Priority CRITICAL 94KEV

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certa…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.33871 Published 2008-09-18 No fix listed CWE-352
TI-2025-14647 CVE-2025-20352 · GHSA-c924-mch4-p3p3

Stack-based buffer overflow in Cisco IOS

Priority CRITICAL 93KEV

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a de…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.40575 Published 2025-09-24 No fix listed CWE-121
Priority CRITICAL 90KEV

A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device t…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0687 Published 2018-03-28 No fix listed CWE-20
Priority CRITICAL 90KEV

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (Do…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0936 Published 2018-03-28 No fix listed CWE-399
TI-2018-00124 CVE-2018-0154 · GHSA-gj5f-9m2c-w52m

Resource management flaw in Cisco IOS

Priority CRITICAL 90KEV

A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0707 Published 2018-03-28 No fix listed CWE-399
Priority CRITICAL 90KEV

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceb…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0707 Published 2017-09-28 No fix listed CWE-399
TI-2017-09014 CVE-2017-12235 · GHSA-83w7-v79x-495q

Improper input validation in Cisco IOS

Priority CRITICAL 90KEV

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, r…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0707 Published 2017-09-28 No fix listed CWE-20
Load more
Open these records in search →