Skip to content

Vulnerabilities of Cisco Cisco IOS XE Software

Is your version affected?

CVE Summary Score Published
CVE-2024-20436 A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled… 8.6 High Sep 25, 2024
CVE-2024-20433 A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software… 8.6 High Sep 25, 2024
CVE-2024-20455 A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of… 8.6 High Sep 25, 2024
CVE-2024-20313 A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent… 7.4 High Apr 24, 2024
CVE-2024-20310 A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM… 6.1 Medium Apr 3, 2024
CVE-2024-20307 A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an… 6.8 Medium Mar 27, 2024
CVE-2024-20308 A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an… 8.6 High Mar 27, 2024
CVE-2024-20265 A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical… 5.9 Medium Mar 27, 2024
CVE-2024-20309 A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated,… 5.6 Medium Mar 27, 2024
CVE-2024-20303 A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs)… 7.4 High Mar 27, 2024
CVE-2024-20278 A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate… 6.5 Medium Mar 27, 2024
CVE-2024-20306 A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an… 6.0 Medium Mar 27, 2024
CVE-2024-20314 A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software… 8.6 High Mar 27, 2024
CVE-2024-20312 A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS… 7.4 High Mar 27, 2024
CVE-2024-20324 A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to… 5.5 Medium Mar 27, 2024
CVE-2024-20259 A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to… 8.6 High Mar 27, 2024
CVE-2024-20311 A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software… 8.6 High Mar 27, 2024
CVE-2024-20316 A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated,… 5.8 Medium Mar 27, 2024
CVE-2023-20273 Exploited Cisco IOS XE Web UI Command Injection Vulnerability 7.2 High Oct 24, 2023
CVE-2023-20198 Exploited Cisco IOS XE Web UI Privilege Escalation Vulnerability 10.0 Critical Oct 16, 2023
CVE-2023-20235 A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting… 6.5 Medium Oct 4, 2023
CVE-2023-20202 A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers… 6.1 Medium Sep 27, 2023
CVE-2023-20109 Exploited Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability 6.6 Medium Sep 27, 2023
CVE-2023-20186 A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS… 8.0 High Sep 27, 2023
CVE-2023-20227 A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an… 8.6 High Sep 27, 2023

Other Cisco products