CVE-2024-20259

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a crafted IPv4 DHCP request packet being mishandle...

CVE-2024-20314

A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service DoS condition on an affected device. This...

CVE-2024-20455

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense UTD component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists...

CVE-2024-20437

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for...

CVE-2024-20464

A vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of received IPv4 PIMv2 packets. An...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Cisco IOS, Cisco IOS XE, and Cisco IOS XR security vulnerabilities

Cisco IOS and others are products of Cisco Corporation USA.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XR is a set of operating systems developed for its network devices.Cisco IOS XE is an operating system. A security vulnerability exists in Cisco IOS, Cisc...

PT-2025-5720 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE versions affected versions not specified Cisco IOS Software versions affected versions not specified Description: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,...

PT-2025-5715 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. Th...

PT-2025-5719 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software versions prior to the fixed version Cisco IOS XE Software versions prior to the fixed version Description: A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a denial of service DoS...

CVE-2024-57074

The JavaScript library xe-utils (specifically version v3.5.31 ) is vulnerable to Prototype Pollution within the lib.merge function. An attacker can exploit this by supplying a crafted payload to inject properties into the global Object.prototype chain. This can lead to a Denial of Service (DoS) b...

CVE-2025-20176: Uncaught Exception

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

PT-2025-5714

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software versions prior to the fixed version Cisco IOS XE Software versions prior to the fixed version Description: A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a DoS condition on an...

xe-utils security vulnerabilities

xe-utils is an open source javascript library, toolkit from XE. A security vulnerability exists in xe-utils version v3.5.31, which stems from the lib.merge function containing a prototype contamination vulnerability...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@beck-zgh/layout-admin (1.2.5), @beck-zgh/pro-element-plus (>=1.2.3, <=1.2.5) +337 more potentially affected by CVE-2024-57074 via xe-utils (>=1.9.8, <=3.5.31)

xe-utils NPM version =1.9.8, =1.2.3, =1.13.0, =0.1.1-beta.0, =0.1.1, =0.4.58, =0.4.38, =0.4.0-rc.2, =0.4.19, =0.1.1, =0.4.18, =0.6.166 - @excelltechkylcv2/components 1.0.0 - @excelltechkylcv2/render 1.0.0 and more Source cves: CVE-2024-57074 Source advisory: MEND:CVE-2024-57074...

CVE-2025-20174: Buffer Access with Incorrect Length Value

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

CVE-2025-20171: Uncaught Exception

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

CVE-2025-20169: Buffer Access with Incorrect Length Value

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...