Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,059 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-20200	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	May 7, 2025	A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20197	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	May 7, 2025	A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20181	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.00	May 7, 2025	A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot…
CVE-2025-20177	Cisco Systems, Inc. iOS Xr	Med	0.44	6.7	0.00	Mar 12, 2025	A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system…
CVE-2025-20143	Cisco Systems, Inc. iOS Xr	Med	0.44	6.7	0.00	Mar 12, 2025	A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have…
CVE-2021-1462	Cisco Systems, Inc. SD-WAN vManage Software	Med	0.44	6.7	0.00	Nov 18, 2024	A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The…
CVE-2021-1440	Cisco Systems, Inc. iOS Xr	Med	0.44	6.8	0.01	Nov 18, 2024	A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS)…
CVE-2021-34752	Cisco Systems, Inc. FTD Software	Med	0.44	6.7	0.00	Nov 15, 2024	A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands with root privileges on the underlying operating system of an affected device. This vulnerability is due to…
CVE-2023-20090	Cisco Systems, Inc. RoomOS	Med	0.44	6.7	0.00	Nov 15, 2024	A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this vulnerability by…
CVE-2022-20793	Cisco Systems, Inc. RoomOS	Med	0.44	6.8	0.00	Nov 15, 2024	A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to…
CVE-2024-20331	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.01	Oct 23, 2024	A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to prevent users from…
CVE-2024-20524	Cisco Systems, Inc. Small Business RV042	Med	0.44	6.8	0.00	Oct 2, 2024	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20523	Cisco Systems, Inc. Rv320 Firmware	Med	0.44	6.8	0.00	Oct 2, 2024	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20517	Cisco Systems, Inc. Rv320 Firmware	Med	0.44	6.8	0.00	Oct 2, 2024	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20516	Cisco Systems, Inc. Small Business RV042	Med	0.44	6.8	0.00	Oct 2, 2024	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20413	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Aug 28, 2024	A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing…
CVE-2024-20411	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Aug 28, 2024	A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code as root on an affected device. This vulnerability is due to insufficient security restrictions when executing commands…
CVE-2024-20456	Cisco Systems, Inc. iOS Xr	Med	0.44	6.7	0.00	Jul 10, 2024	A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have…
CVE-2024-20391	Cisco Systems, Inc. Secure Client	Med	0.44	6.8	0.00	May 15, 2024	A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function.…
CVE-2024-20307	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.01	Mar 27, 2024	A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1…
CVE-2024-20277	Cisco Systems, Inc. Thousandeyes Enterprise Agent	Med	0.44	6.8	0.01	Jan 17, 2024	A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to…
CVE-2023-20272	Cisco Systems, Inc. Identity Services Engine Software	Med	0.44	6.7	0.01	Nov 21, 2023	A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application. This vulnerability is due to insufficient file input validation. An attacker could…
CVE-2023-20042	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.01	Nov 1, 2023	A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2023-20236	Cisco Systems, Inc. iOS Xr	Med	0.44	6.7	0.00	Sep 13, 2023	A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this…
CVE-2023-20116	Cisco Systems, Inc. Unified Communications Manager	Med	0.44	6.8	0.01	Jun 28, 2023	A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service…
CVE-2023-20100	Cisco Systems, Inc. iOS Xe	Med	0.44	6.8	0.01	Mar 23, 2023	A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2023-20081	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.01	Mar 23, 2023	A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2023-20044	Cisco Systems, Inc. Cx Cloud Agent	Med	0.44	6.7	0.00	Jan 20, 2023	A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the…
CVE-2023-20043	Cisco Systems, Inc. Cx Cloud Agent	Med	0.44	6.7	0.00	Jan 20, 2023	A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit…
CVE-2022-20930	Cisco Systems, Inc. SD-WAN	Med	0.44	6.7	0.00	Sep 30, 2022	A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting…
CVE-2022-20865	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	Aug 25, 2022	A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient…
CVE-2022-20758	Cisco Systems, Inc. iOS Xr	Med	0.44	6.8	0.01	Apr 15, 2022	A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the incorrect…
CVE-2022-20694	Cisco Systems, Inc. iOS Xe	Med	0.44	6.8	0.01	Apr 15, 2022	A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condition.…
CVE-2022-20679	Cisco Systems, Inc. iOS Xe	Med	0.44	6.8	0.01	Apr 15, 2022	A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to buffer exhaustion that occurs while…
CVE-2022-20774	Cisco Systems, Inc. IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware	Med	0.44	6.8	0.00	Apr 6, 2022	A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface of an…
CVE-2021-44832	Apache Log4j	Med	0.44	6.6	0.98	Dec 28, 2021	Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP…
CVE-2021-40124	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Med	0.44	6.7	0.00	Nov 4, 2021	A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts…
CVE-2021-40114	Snort Snort	Med	0.44	6.8	0.02	Oct 27, 2021	Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper…
CVE-2021-34756	Cisco Systems, Inc. Firepower Management Center Virtual Appliance	Med	0.44	6.7	0.00	Oct 27, 2021	Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-34755	Cisco Systems, Inc. Firepower Management Center Virtual Appliance	Med	0.44	6.7	0.00	Oct 27, 2021	Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-34729	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Sep 23, 2021	A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2021-34726	Cisco Systems, Inc. SD-WAN	Med	0.44	6.7	0.00	Sep 23, 2021	A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is due to insufficient input…
CVE-2021-34725	Cisco Systems, Inc. IOS XE SD-WAN Software	Med	0.44	6.7	0.00	Sep 23, 2021	A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on…
CVE-2021-34723	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Sep 23, 2021	A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due to insufficient validation of specific…
CVE-2021-34703	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.01	Sep 23, 2021	A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper…
CVE-2021-34722	Cisco Systems, Inc. iOS Xr	Med	0.44	6.7	0.00	Sep 9, 2021	Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see…
CVE-2021-34721	Cisco Systems, Inc. iOS Xr	Med	0.44	6.7	0.00	Sep 9, 2021	Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see…
CVE-2021-34716	Cisco Systems, Inc. Telepresence Video Communication Server	Med	0.44	6.7	0.02	Aug 18, 2021	A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as the root user. This…
CVE-2021-33478	Cisco Systems, Inc. IP Phone	Med	0.44	6.8	0.00	Jul 22, 2021	The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain…
CVE-2021-1520	Cisco Systems, Inc. Rv340w Firmware	Med	0.44	6.7	0.00	May 6, 2021	A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system (OS). This vulnerability…

CVE-2025-20200MedMay 7, 2025
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20197MedMay 7, 2025
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20181MedMay 7, 2025
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.00
A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot…
CVE-2025-20177MedMar 12, 2025
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.7epss 0.00
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system…
CVE-2025-20143MedMar 12, 2025
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.7epss 0.00
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have…
CVE-2021-1462MedNov 18, 2024
Cisco Systems, Inc.
SD-WAN vManage Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The…
CVE-2021-1440MedNov 18, 2024
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.8epss 0.01
A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS)…
CVE-2021-34752MedNov 15, 2024
Cisco Systems, Inc.
FTD Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands with root privileges on the underlying operating system of an affected device. This vulnerability is due to…
CVE-2023-20090MedNov 15, 2024
Cisco Systems, Inc.
RoomOS
risk 0.44cvss 6.7epss 0.00
A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this vulnerability by…
CVE-2022-20793MedNov 15, 2024
Cisco Systems, Inc.
RoomOS
risk 0.44cvss 6.8epss 0.00
A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to…
CVE-2024-20331MedOct 23, 2024
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.01
A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to prevent users from…
CVE-2024-20524MedOct 2, 2024
Cisco Systems, Inc.
Small Business RV042
risk 0.44cvss 6.8epss 0.00
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20523MedOct 2, 2024
Cisco Systems, Inc.
Rv320 Firmware
risk 0.44cvss 6.8epss 0.00
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20517MedOct 2, 2024
Cisco Systems, Inc.
Rv320 Firmware
risk 0.44cvss 6.8epss 0.00
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20516MedOct 2, 2024
Cisco Systems, Inc.
Small Business RV042
risk 0.44cvss 6.8epss 0.00
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS)…
CVE-2024-20413MedAug 28, 2024
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing…
CVE-2024-20411MedAug 28, 2024
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code as root on an affected device. This vulnerability is due to insufficient security restrictions when executing commands…
CVE-2024-20456MedJul 10, 2024
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.7epss 0.00
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have…
CVE-2024-20391MedMay 15, 2024
Cisco Systems, Inc.
Secure Client
risk 0.44cvss 6.8epss 0.00
A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function.…
CVE-2024-20307MedMar 27, 2024
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.01
A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1…
CVE-2024-20277MedJan 17, 2024
Cisco Systems, Inc.
Thousandeyes Enterprise Agent
risk 0.44cvss 6.8epss 0.01
A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to…
CVE-2023-20272MedNov 21, 2023
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application. This vulnerability is due to insufficient file input validation. An attacker could…
CVE-2023-20042MedNov 1, 2023
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.01
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2023-20236MedSep 13, 2023
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.7epss 0.00
A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this…
CVE-2023-20116MedJun 28, 2023
Cisco Systems, Inc.
Unified Communications Manager
risk 0.44cvss 6.8epss 0.01
A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service…
CVE-2023-20100MedMar 23, 2023
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.8epss 0.01
A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2023-20081MedMar 23, 2023
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.01
A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2023-20044MedJan 20, 2023
Cisco Systems, Inc.
Cx Cloud Agent
risk 0.44cvss 6.7epss 0.00
A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the…
CVE-2023-20043MedJan 20, 2023
Cisco Systems, Inc.
Cx Cloud Agent
risk 0.44cvss 6.7epss 0.00
A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit…
CVE-2022-20930MedSep 30, 2022
Cisco Systems, Inc.
SD-WAN
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting…
CVE-2022-20865MedAug 25, 2022
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient…
CVE-2022-20758MedApr 15, 2022
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.8epss 0.01
A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the incorrect…
CVE-2022-20694MedApr 15, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.8epss 0.01
A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condition.…
CVE-2022-20679MedApr 15, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.8epss 0.01
A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to buffer exhaustion that occurs while…
CVE-2022-20774MedApr 6, 2022
Cisco Systems, Inc.
IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware
risk 0.44cvss 6.8epss 0.00
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface of an…
CVE-2021-44832MedDec 28, 2021
Apache
Log4j
risk 0.44cvss 6.6epss 0.98
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP…
CVE-2021-40124MedNov 4, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts…
CVE-2021-40114MedOct 27, 2021
Snort
Snort
risk 0.44cvss 6.8epss 0.02
Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper…
CVE-2021-34756MedOct 27, 2021
Cisco Systems, Inc.
Firepower Management Center Virtual Appliance
risk 0.44cvss 6.7epss 0.00
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-34755MedOct 27, 2021
Cisco Systems, Inc.
Firepower Management Center Virtual Appliance
risk 0.44cvss 6.7epss 0.00
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-34729MedSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2021-34726MedSep 23, 2021
Cisco Systems, Inc.
SD-WAN
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is due to insufficient input…
CVE-2021-34725MedSep 23, 2021
Cisco Systems, Inc.
IOS XE SD-WAN Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on…
CVE-2021-34723MedSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due to insufficient validation of specific…
CVE-2021-34703MedSep 23, 2021
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.01
A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper…
CVE-2021-34722MedSep 9, 2021
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.7epss 0.00
Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see…
CVE-2021-34721MedSep 9, 2021
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.7epss 0.00
Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see…
CVE-2021-34716MedAug 18, 2021
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.44cvss 6.7epss 0.02
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as the root user. This…
CVE-2021-33478MedJul 22, 2021
Cisco Systems, Inc.
IP Phone
risk 0.44cvss 6.8epss 0.00
The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain…
CVE-2021-1520MedMay 6, 2021
Cisco Systems, Inc.
Rv340w Firmware
risk 0.44cvss 6.7epss 0.00
A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system (OS). This vulnerability…

Page 44 of 142