Cisco IOS XE Software vulnerabilities

88 known vulnerabilities in Cisco IOS XE Software from Cisco. 87 are rated high or critical, and 6 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Cisco IOS XE Software: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20693Apr 15, 2022CiscoEPSS 1.6%

  A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this v

• 8.6 High severity

  Cisco IOS XE Software: Out-of-bounds Write

  CVE-2022-20683Apr 15, 2022CiscoEPSS 1.49%

  A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected

• 8.6 High severity

  Cisco IOS XE Software: NULL Pointer Dereference

  CVE-2022-20682Apr 15, 2022CiscoEPSS 1.35%

  A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS)

• 7.8 High severity

  Cisco IOS XE Software: Incorrect Privilege Assignment

  CVE-2022-20681Apr 15, 2022Cisco

  A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerabi

• 7.7 High severity

  A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an…

  CVE-2022-20679Apr 15, 2022CiscoEPSS 1.31%

  A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to buffer exhaustion tha

• 7.5 High severity

  Cisco IOS XE Software: Improper Handling of Exceptional Conditions

  CVE-2022-20678Apr 15, 2022Cisco

  A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of ce

• 8.8 High severity

  Cisco IOS and IOS XE Software SNMP Remote Code Execution Exploited

  CVE-2017-6742Jul 17, 2017CiscoEPSS 21.3%

  A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected devi

• 8.8 High severity

  Cisco IOS and IOS XE Software SNMP Remote Code Execution Exploited

  CVE-2017-6738Jul 17, 2017CiscoEPSS 10.9%

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.