IOS XE Software for Cisco Meraki

CVEs (273)

• CVE-2025-20315HigSep 24, 2025
  Cisco Systems, Inc.

  IOS XE Software for Cisco Meraki
  risk 0.56cvss 8.6epss 0.00

  A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition. This vulnerability is due to improper…

• CVE-2023-20227HigSep 27, 2023
  Cisco Systems, Inc.

  Cisco IOS XE Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain L2TP…

• CVE-2023-20226HigSep 27, 2023
  Cisco Systems, Inc.

  Cisco IOS XE Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This…

• CVE-2023-20187HigSep 27, 2023
  Cisco Systems, Inc.

  Cisco IOS XE Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS)…

• CVE-2023-20033HigSep 27, 2023
  Cisco Systems, Inc.

  iOS Xr Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due…

• CVE-2023-20072HigMar 23, 2023
  Cisco Systems, Inc.

  iOS Xr Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the…

• CVE-2023-20027HigMar 23, 2023
  Cisco Systems, Inc.

  iOS Xr Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper…

• CVE-2022-20870HigOct 10, 2022
  Cisco Systems, Inc.

  Cisco IOS XE Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a…

• CVE-2022-20837HigOct 10, 2022
  Cisco Systems, Inc.

  iOS Xr Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a logic error…

• CVE-2022-20856HigSep 30, 2022
  Cisco Systems, Inc.

  Cisco IOS XE Wireless Controller Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

• CVE-2022-20848HigSep 30, 2022
  Cisco Systems, Inc.

  Wireless Lan Controller Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the…

• CVE-2022-20847HigSep 30, 2022
  Cisco Systems, Inc.

  Cisco IOS XE Wireless Controller Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of…

• CVE-2022-20683HigApr 15, 2022
  Cisco Systems, Inc.

  Catalyst 9800 Series Wireless Controllers
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…

• CVE-2022-20682HigApr 15, 2022
  Cisco Systems, Inc.

  Cisco IOS XE Wireless Controller Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…

• CVE-2022-20678HigApr 15, 2022
  Cisco Systems, Inc.

  iOS Xr Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segments.…

• CVE-2021-34769HigSep 23, 2021
  Cisco Systems, Inc.

  Cisco Catalyst 9000 Family Wireless Controllers
  risk 0.56cvss 8.6epss 0.01

  Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

• CVE-2021-34768HigSep 23, 2021
  Cisco Systems, Inc.

  Catalyst 9800 Series Wireless Controllers
  risk 0.56cvss 8.6epss 0.01

  Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

• CVE-2021-1624HigSep 23, 2021
  Cisco Systems, Inc.

  iOS Xr Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco QuantumFlow Processor of an affected device, resulting in a denial of service (DoS)…

• CVE-2021-1622HigSep 23, 2021
  Cisco Systems, Inc.

  cBR-8 Converged Broadband Routers
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (DoS) condition. This vulnerability is due…

• CVE-2021-1615HigSep 23, 2021
  Cisco Systems, Inc.

  Embedded Wireless Controller with Catalyst Access Points Software
  risk 0.56cvss 8.6epss 0.01

  A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This vulnerability is due…