CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2017-3881

CVE-2017-3881 is a Cisco IOS/IOS XE vulnerability in the Cluster Management Protocol (CMP) handling. Two factors enable exploitation: (1) CMP-specific Telnet options were not restricted to internal cluster communications and could be processed over any Telnet session; (2) malformed CMP-specific T...

CVE-2017-6736

CVE-2017-6736 concerns Cisco IOS/IOS XE SNMP subsystem vulnerabilities caused by a buffer overflow. An authenticated remote attacker could remotely execute code or cause a reload by sending crafted SNMP packets over IPv4/IPv6. The issue affects SNMP versions 1/2c/3; for SNMPv2c you may need the r...

CVE-2018-0167

CVE-2018-0167 involves multiple buffer overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, IOS XE Software, and IOS XR Software. The description documents that an unauthenticated, adjacent attacker could trigger a denial of service or escalate pri...

CVE-2018-0175

CVE-2018-0175 is a vulnerability in the LLDP subsystem of Cisco IOS Software, IOS XE Software, and IOS XR Software. The issue stems from a Format String vulnerability in LLDP that could allow an unauthenticated, adjacent attacker to cause a denial of service or to execute arbitrary code with elev...

CVE-2017-6743

Cisco IOS and IOS XE SNMP Remote Code Execution Vulnerabilities (CVE-2017-6743) arise from buffer overflow in the SNMP subsystem, allowing an authenticated, remote attacker to execute arbitrary code or cause a reload by sending crafted SNMP packets over IPv4/IPv6. Exploitation varies by SNMP vers...

CVE-2018-0172

CVE-2018-0172 affects Cisco IOS/IOS XE. The issue lies in the DHCP option 82 encapsulation in DHCPv4, where incomplete input validation can lead to a heap overflow and device reload, causing DoS. An unauthenticated, remote attacker could trigger this by sending crafted DHCPv4 packets. Documents n...

CVE-2017-6737

CVE-2017-6737 is a Cisco SNMP remote code execution vulnerability affecting the SNMP subsystem in Cisco IOS and IOS XE. The issue arises from a buffer overflow in the SNMP handling code that could allow an authenticated, remote attacker to execute arbitrary code or cause a system reload by sendin...

CVE-2018-0151

CVE-2018-0151 affects Cisco IOS and IOS XE QoS subsystem. It stems from incorrect bounds checking of values in packets destined to UDP port 18999, leading to an exploitable buffer overflow that could allow unauthenticated remote code execution with elevated privileges or cause a device reload DoS...

CVE-2017-12237

CVE-2017-12237 affects Cisco IOS (15.0–15.6) and IOS XE (3.5–16.5) with ISAKMP enabled. The IKEv2 module is vulnerable to unauthenticated remote probes via specific IKEv2 packets, allowing high CPU utilization, traceback messages, or device reloads that cause DoS. Affected devices need ISAKMP to ...

CVE-2017-6738

Cisco IOS and IOS XE SNMP subsystem contains multiple buffer overflow vulnerabilities that could allow an authenticated, remote attacker to execute arbitrary code or cause a reload via crafted SNMP packets over IPv4/IPv6. Affected are SNMP versions 1–3; for SNMPv2c/earlier, attacker needs the rea...

CVE-2018-0158

CVE-2018-0158 affects Cisco IOS/IOS XE with an issue in the IKEv2 processing path. The vulnerability can be triggered by crafted IKEv2 packets from an unauthenticated, remote attacker, potentially causing a memory leak or device reload and resulting in a DoS condition. Connected sources corrobora...

CVE-2017-6740

CVE-2017-6740 describes multiple SNMP remote code execution vulnerabilities in Cisco IOS and IOS XE, due to a buffer overflow in the SNMP subsystem. An authenticated, remote attacker could exploit crafted SNMP packets (over IPv4/IPv6) to execute arbitrary code or cause a reload. Exploitation for ...

CVE-2018-0156

CVE-2018-0156 concerns Cisco IOS/IOS XE Smart Install DoS. The vulnerability arises from improper validation of Smart Install packet data, allowing an unauthenticated, remote attacker to trigger a device reload via a crafted packet sent to TCP port 4786. Affected are Cisco devices configured as S...

CVE-2017-6739

CVE-2017-6739 describes a Cisco IOS/IOS XE SNMP subsystem vulnerability where a buffer overflow in SNMP handling can allow an authenticated, remote attacker to either reload the device or execute arbitrary code. Affected are Cisco devices running IOS/IOS XE with SNMP enabled; exploitation require...

CVE-2017-6663

CVE-2017-6663 relates to Cisco IOS/IOS XE Autonomic Networking. The flaw allows an unauthenticated, adjacent attacker to trigger a reload of autonomic nodes, causing a DoS condition. Affected products include Cisco IOS Software and Cisco IOS XE Software with Autonomic Networking enabled (per Dena...

CVE-2017-6627

CVE-2017-6627 affects Cisco IOS 15.1/15.2/15.4 and IOS XE 3.14–3.18. A UDP processing code issue leaves UDP sockets idle, allowing unauthenticated remote attackers to send UDP packets (dest port 0) that fill the input interface queue, wedge an interface queue, and cause DoS. The input queue repor...

CVE-2018-0173

CVE-2018-0173 affects Cisco IOS Software and Cisco IOS XE Software. The issue is incomplete input validation of encapsulated DHCPv4 option 82 information, processed when handling DHCPOFFER responses forwarded to DHCP servers. A crafted DHCPv4 packet can trigger an error in processing the option 8...

CVE-2018-0174

CVE-2018-0174 affects Cisco IOS/IOS XE DHCP option 82 encapsulation. The issue is incomplete input validation of DHCPv4 option 82 data received from DHCP relay agents, allowing an unauthenticated, remote attacker to cause an affected device to reload and trigger a DoS. The connected documents con...

CVE-2023-20198

Cisco IOS XE Web UI vulnerabilities CVE-2023-20198 and CVE-2023-20273 allow authenticated attackers to escalate to root via the Web UI due to input validation weaknesses, enabling privilege escalation and potential remote code execution. Cisco has released fixed builds: 17.3.8a (for the 17.3 trai...

CVE-2018-0155

CVE-2018-0155 affects Cisco Catalyst 4500/4500-X switches where the BFD offload has insufficient error handling for incomplete BFD headers. An unauthenticated remote attacker can send crafted BFD messages to trigger a crash in the iosd process and potentially cause system reloads, resulting in Do...

CVE-2017-12319

Cisco IOS XE Software EVPN BGP vulnerability CVE-2017-12319 allows an unauthenticated remote attacker to trigger a reload or BGP routing-table corruption, causing DoS. Root cause: changes in the BGP MPLS-Based EVPN RFC 7432 draft lead to miscalculation of the IP address length field when processi...

CVE-2018-0159

CVE-2018-0159 affects Cisco IOS/IOS XE: IKEv1 implementation vulnerability where improper validation of specific IKEv1 packets allows an unauthenticated, remote attacker to reload an affected device, causing DoS during IKE negotiation. Root cause: packet validation flaw in IKEv1 handling. Impact:...

CVE-2022-20693

Summary of CVE-2022-20693 (Cisco IOS XE Web UI API Injection) : A vulnerability in the Cisco IOS XE Software web UI API could allow an authenticated, remote attacker to inject commands into the underlying OS with root privileges due to insufficient input validation. Exploitation would involve sen...

CVE-2023-20273

CVE-2023-20273 concerns Cisco IOS XE Software Web UI. A vulnerability in the Web UI input validation allows an authenticated, remote attacker to inject commands with root privileges, potentially compromising the underlying OS. CVSS v3.1 base score 7.2 (HIGH); attack vector NETWORK, privileges req...

CVE-2017-6742

CVE-2017-6742 is a Cisco SNMP remote code execution vulnerability in the SNMP stack of IOS/IOS XE. A stack-based overflow could allow an authenticated attacker to run arbitrary code or cause a reload by sending crafted SNMP packets (targets SNMP v1/v2c/v3; needs read-only community string or v3 c...

CVE-2022-20851

CVE-2022-20851 affects Cisco IOS XE Software, specifically the Web UI command-injection path. The vulnerability arises from insufficient input validation in the Web UI API, allowing an authenticated attacker with Administrator privileges to craft input that can be processed by the underlying OS, ...

CVE-2016-6415

CVE-2016-6415 is an information-disclosure vulnerability in Cisco IOS, IOS XE, IOS XR (and PIX prior to 7.0) where the IKEv1 security-negotiation code lacks sufficient checks, enabling an unauthenticated remote attacker to read memory contents via an SA negotiation request. Affected products span...

CVE-2025-20352

CVE-2025-20352 concerns Cisco IOS/IOS XE SNMP subsystem. A stack-based buffer overflow could allow a low-privileged, authenticated remote attacker to cause a DoS (reload) or, with higher privileges, execute arbitrary code as root on affected devices. Exploitation requires SNMP credentials (v2c/v1...

CVE-2023-20076

CVE-2023-20076 affects Cisco IOx Application Hosting Environment. The flaw arises from incomplete sanitization of parameters in an activation payload, allowing an authenticated, remote attacker to execute arbitrary commands as root on the underlying host OS. The issue is exploitable by deploying/...

CVE-2023-20109

CVE-2023-20109 affects Cisco IOS and IOS XE GET VPN. Root cause: insufficient validation of GDOI/G-IKEv2 attributes in GET VPN, enabling an authenticated admin on a group member or key server to execute arbitrary code or crash the device. Impact (as stated): full device control or reboot/DoS. Rem...

CVE-2019-1904

CVE-2019-1904 involves Cisco IOS XE Software’s web-based UI CSRF vulnerability. The issue stems from insufficient CSRF protections in the web UI when the HTTP Server feature is enabled, allowing an unauthenticated, remote attacker to coerce a logged-in user into performing arbitrary actions. If t...

CVE-2025-20188

CVE-2025-20188 affects Cisco IOS XE Software for Wireless LAN Controllers (WLCs) via the Out-of-Band AP Image Download feature. The issue stems from a hard-coded JSON Web Token (JWT) on affected systems, allowing an unauthenticated, remote attacker to upload arbitrary files, perform path traversa...

CVE-2021-1435

CVE-2021-1435 affects Cisco IOS XE Software Web UI, allowing an authenticated attacker to inject and execute arbitrary commands as root due to insufficient input validation. Exploitation occurs via crafted requests to the Web UI; impact is root-level command execution. Cisco released advisories a...

CVE-2020-3204

CVE-2020-3204 affects Cisco IOS and IOS XE Tcl interpreter. The vulnerability arises from insufficient input validation of data passed to Tcl, allowing an authenticated, local attacker with privileged EXEC credentials to execute arbitrary code on the underlying OS with root privileges. Impact is ...

CVE-2013-0149

CVE-2013-0149: The OSPF implementation in Cisco IOS (12.0–12.4, 15.0–15.3), IOS-XE 2.x–3.9.xS, ASA/PIX 7.x–9.1, FWSM, NX-OS, and StarOS before 14.0.50488 fails to properly validate LSA type 1 packets before updating the LSA database, enabling remote attackers to cause a denial of service (routing...

CVE-2023-20082

Cisco IOS XE Software for Cisco Catalyst 9300 Series switches contains a Secure Boot bypass (CVE-2023-20082). The issue stems from errors when retrieving the public release key used for image signature verification, allowing an authenticated, level-15 privileged user or a physically compromising ...

CVE-2021-1223

CVE-2021-1223 affects Cisco products with the Snort detection engine, where incorrect handling of HTTP range header (per Cisco/NVD wording) could allow an unauthenticated, remote attacker to bypass a configured HTTP file policy and deliver a malicious payload by sending crafted HTTP packets throu...

CVE-2022-20920

CVE-2022-20920 affects Cisco IOS Software and Cisco IOS XE Software. It is a DoS vulnerability in the SSH implementation caused by improper resource handling during exceptional conditions. A remote, authenticated attacker can repeatedly connect and send specific SSH requests to force a device rel...

CVE-2025-20363

CVE-2025-20363 affects Cisco Secure Firewall ASA/FTD web services and several Cisco IOS families. The issue arises from improper validation of user-supplied input in HTTP requests, allowing an unauthenticated remote attacker (ASA/FTD) or an authenticated, low-privilege remote attacker (IOS/IOS XE...

CVE-2017-6770

CVE-2017-6770 affects Cisco IOS, ASA, NX-OS, and IOS XE platforms (OSPF LSA database). The issue enables an unauthenticated, remote attacker to seize control of the OSPF AS routing table by injecting crafted OSPF LSA type 1 packets, potentially intercepting or black-holing traffic. The vulnerabil...

CVE-2019-16009

CVE-2019-16009 describes a CSRF vulnerability in the Cisco IOS and Cisco IOS XE web UI due to insufficient CSRF protections. An unauthenticated, remote attacker could lure a user into a malicious link to perform arbitrary actions with the user’s privileges, including configurations changes or dev...

CVE-2024-20433

Cisco IOS and IOS XE Software are affected by CVE-2024-20433 due to a buffer overflow in the RSVP processing path. An unauthenticated, remote attacker can send crafted RSVP packets to cause the device to reload, yielding a DoS condition. Cisco’s advisory and multiple vendor/NVD records confirm th...

CVE-2020-3408

CVE-2020-3408 concerns Cisco IOS and IOS XE Split DNS DoS. The issue stems from the Split DNS feature’s regex engine timing out while processing the DNS name list configuration, allowing an unauthenticated, remote attacker to trigger device reloads and a denial-of-service condition. Affected prod...

CVE-2021-1529

Cisco IOS XE SD-WAN Software contains a CLI input-validation flaw that can let an authenticated, local attacker run arbitrary root commands. Vectors involve submitting crafted CLI input after authentication. Impact is arbitrary OS command execution with root privileges. Cisco has released updates...

CVE-2020-3417

CVE-2020-3417 affects Cisco IOS XE Software. It enables an authenticated, local attacker to execute persistent code at boot time and break the chain of trust due to incorrect ROMMON-variable handling during boot script validation. Exploitation requires root shell access or physical access to the ...

CVE-2023-20027

The CVE-2023-20027 issue affects Cisco IOS XE Software: IPv4 Virtual Fragmentation Reassembly (VFR) when MTU on a tunnel/physical interface is > 4,615 bytes. The root cause is improper reassembly of large fragments, allowing an unauthenticated remote attacker to trigger a DoS by sending fragme...

CVE-2022-20681

CVE-2022-20681 affects Cisco IOS XE on Catalyst 9000 Family Switches and Wireless Controllers. The root cause is insufficient validation of user privileges after certain CLI commands, allowing an authenticated, local low-privilege user to elevate to level 15 and execute arbitrary commands with hi...

CVE-2024-20271

CVE-2024-20271 affects Cisco Access Point Software. The issue is in IP packet processing, due to insufficient IPv4 packet input validation, allowing an unauthenticated, remote attacker to trigger a DoS by forcing a reload of the device. This can be exploited without AP association and cannot be t...

CVE-2021-1224

CVE-2021-1224 affects Cisco products via a TCP Fast Open (TFO) related bypass of HTTP file policies when used with Snort. The vulnerability arises from incorrect detection of HTTP payloads that are partially contained in the TFO handshake, enabling an unauthenticated, remote attacker to deliver a...