VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,058 total · sorted by risk
  • CVE-2025-20115HigMar 12, 2025
    Cisco Systems, Inc.
    iOS Xr
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to a memory corruption that occurs when…

  • CVE-2020-27124HigNov 18, 2024
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause the affected device to reload unexpectedly, leading to a denial of service (DoS) condition. The vulnerability is due to…

  • CVE-2023-20125HigNov 15, 2024
    Cisco Systems, Inc.
    Broadworks Network Server
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting does not occur for certain…

  • CVE-2024-20495HigOct 23, 2024
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service…

  • CVE-2024-20494HigOct 23, 2024
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of…

  • CVE-2024-20426HigOct 23, 2024
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

  • CVE-2024-20402HigOct 23, 2024
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service…

  • CVE-2024-20351HigOct 23, 2024
    Cisco Systems, Inc.
    Secure Firewall Threat Defense
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER Services could allow an unauthenticated, remote attacker to cause legitimate network traffic to be dropped, resulting in a…

  • CVE-2024-20339HigOct 23, 2024
    Cisco Systems, Inc.
    Secure Firewall Threat Defense
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an…

  • CVE-2024-20330HigOct 23, 2024
    Cisco Systems, Inc.
    Snort
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an unauthenticated, remote attacker to cause memory corruption, which could cause the Snort detection…

  • CVE-2024-20260HigOct 23, 2024
    Cisco Systems, Inc.
    Secure Firewall ASA Software
    risk 0.56cvss 8.6epss 0.01

    Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco…

  • CVE-2024-20501HigOct 2, 2024
    Cisco Systems, Inc.
    Meraki MX and Cisco Meraki Z Series Teleworker Gateway
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities…

  • CVE-2024-20499HigOct 2, 2024
    Cisco Systems, Inc.
    Meraki MX and Cisco Meraki Z Series Teleworker Gateway
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities…

  • CVE-2024-20498HigOct 2, 2024
    Cisco Systems, Inc.
    Meraki MX and Cisco Meraki Z Series Teleworker Gateway
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities…

  • CVE-2024-20480HigSep 25, 2024
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition…

  • CVE-2024-20467HigSep 25, 2024
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper management of…

  • CVE-2024-20464HigSep 25, 2024
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of received…

  • CVE-2024-20455HigSep 25, 2024
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. …

  • CVE-2024-20436HigSep 25, 2024
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer…

  • CVE-2024-20433HigSep 25, 2024
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This…

  • CVE-2024-20304HigSep 11, 2024
    Cisco Systems, Inc.
    iOS Xr
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the UDP packet memory of an affected device. This vulnerability exists because the Mtrace2 code does not properly handle…

  • CVE-2024-20446HigAug 28, 2024
    Cisco Systems, Inc.
    NX-OS Software
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in a DHCPv6 RELAY-REPLY…

  • CVE-2024-20375HigAug 21, 2024
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

  • CVE-2024-20308HigMar 27, 2024
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1…

  • CVE-2024-20314HigMar 27, 2024
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service (DoS) condition on an…

  • CVE-2024-20311HigMar 27, 2024
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An…

  • CVE-2024-20271HigMar 27, 2024
    Cisco Systems, Inc.
    access point (AP) software
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4…

  • CVE-2024-20259HigMar 27, 2024
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a crafted IPv4 DHCP request…

  • CVE-2024-20337HigMar 6, 2024
    Cisco Systems, Inc.
    Secure Client
    risk 0.56cvss 8.2epss 0.30

    A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed (CRLF) injection attack against a user. This vulnerability is due to insufficient validation of user-supplied…

  • CVE-2024-20321HigFeb 29, 2024
    Cisco Systems, Inc.
    NX-OS Software
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped…

  • CVE-2024-20267HigFeb 29, 2024
    Cisco Systems, Inc.
    NX-OS Software
    risk 0.56cvss 8.6epss 0.01

    A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability…

  • CVE-2023-20095HigNov 1, 2023
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…

  • CVE-2023-20083HigNov 1, 2023
    Cisco Systems, Inc.
    FTD
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the CPU of an affected device to spike to 100 percent, which could stop all traffic…

  • CVE-2023-20244HigNov 1, 2023
    Cisco Systems, Inc.
    Firepower 2100 Series Firewalls
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…

  • CVE-2023-20086HigNov 1, 2023
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper…

  • CVE-2023-20259HigOct 4, 2023
    Cisco Systems, Inc.
    Unified Communications Products
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is…

  • CVE-2023-20227HigSep 27, 2023
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain L2TP…

  • CVE-2023-20226HigSep 27, 2023
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This…

  • CVE-2023-20223HigSep 27, 2023
    Cisco Systems, Inc.
    Dna Center
    risk 0.56cvss 8.6epss 0.00

    A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control enforcement on API requests. An…

  • CVE-2023-20187HigSep 27, 2023
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS)…

  • CVE-2023-20033HigSep 27, 2023
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due…

  • CVE-2023-20243HigSep 6, 2023
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS…

  • CVE-2023-20006HigJun 28, 2023
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an unauthenticated, remote attacker to cause an…

  • CVE-2023-20162HigMay 18, 2023
    Cisco Systems, Inc.
    Small Business Series Switches
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These…

  • CVE-2023-20158HigMay 18, 2023
    Cisco Systems, Inc.
    Small Business Series Switches
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These…

  • CVE-2023-20157HigMay 18, 2023
    Cisco Systems, Inc.
    Small Business Series Switches
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These…

  • CVE-2023-20156HigMay 18, 2023
    Cisco Systems, Inc.
    Small Business Series Switches
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These…

  • CVE-2023-20024HigMay 18, 2023
    Cisco Systems, Inc.
    Small Business Series Switches
    risk 0.56cvss 8.6epss 0.01

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These…

  • CVE-2023-20080HigMar 23, 2023
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data boundaries.…

  • CVE-2023-20072HigMar 23, 2023
    Cisco Systems, Inc.
    iOS Xe
    risk 0.56cvss 8.6epss 0.01

    A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the…

Page 16 of 142