Cisco IOS and IOS XE vulnerabilities
We track 12 vulnerabilities in Cisco IOS and IOS XE products. 11 are rated high or critical, and 12 have been exploited in real attacks. The most recent was published on March 28, 2018.
Latest Cisco IOS and IOS XE vulnerabilities
- 8.6 High severity
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Exploited
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulne
- 8.6 High severity
Cisco IOS and IOS XE Software Improper Input Validation Exploited
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in
- 8.6 High severity
Cisco IOS and IOS XE Software Improper Input Validation Exploited
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulne
- 9.8 Critical severity
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Exploited
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary co
- 7.5 High severity
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Exploited
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of servi
- 8.6 High severity
Cisco IOS and XE Software Internet Key Exchange Memory Leak Exploited
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (Do
- 7.5 High severity
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Exploited
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due t
- 8.6 High severity
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Exploited
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causin
- 9.8 Critical severity
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Exploited
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges. The vulne
- 9.8 Critical severity
Cisco IOS and IOS XE Software DHCP Remote Code Execution Exploited
The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause
- 7.5 High severity
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Exploited
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected
- 6.5 Medium severity
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Exploited
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. Mo