Cisco IOS XE Catalyst SD-WAN vulnerabilities

3 known vulnerabilities in Cisco IOS XE Catalyst SD-WAN from Cisco. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Exploited

  CVE-2025-20352Sep 24, 2025CiscoEPSS 40.6%

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an af

• 8.8 High severity

  Cisco IOS XR Software: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20655Nov 15, 2024Cisco

  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected devi

• 8.6 High severity

  A vulnerability in the process that classifies traffic that is going to the Unified Threat…

  CVE-2024-20455Sep 25, 2024Cisco

  A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an af