Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-1295	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1294	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.05		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1293	Cisco Systems, Inc. Rv160w Wireless Ac VPN Router Firmware	Cri	0.64	9.8	0.05		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1292	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1291	Cisco Systems, Inc. Rv160w Wireless Ac VPN Router Firmware	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1290	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1289	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1142	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1141	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1140	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1139	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1138	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1301	Cisco Systems, Inc. SD-WAN	Cri	0.64	9.8	0.02		Jan 20, 2021	Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-1300	Cisco Systems, Inc. SD-WAN	Cri	0.64	9.8	0.02		Jan 20, 2021	Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2020-27134	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.02		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27133	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27132	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27127	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-3531	Cisco Systems, Inc. IoT Field Network Director	Cri	0.64	9.8	0.02		Nov 18, 2020	A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls.…
CVE-2020-3470	Cisco Systems, Inc. Unified Computing System Integrated Management Controller	Cri	0.64	9.8	0.05		Nov 18, 2020	Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input.…
CVE-2020-27130	Cisco Systems, Inc. Security Manager	Cri	0.64	9.1	0.66		Nov 17, 2020	A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could…
CVE-2020-3284	Cisco Systems, Inc. iOS Xr	Cri	0.64	9.8	0.03		Nov 6, 2020	A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS…
CVE-2020-3580	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.64	6.1	0.86	KEV	Oct 21, 2020	Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web…
CVE-2019-16028	Cisco Systems, Inc. Firepower Management Center	Cri	0.64	9.8	0.03		Sep 23, 2020	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due…
CVE-2020-3446	Cisco Systems, Inc. Wide Area Application Services	Cri	0.64	9.8	0.01		Aug 26, 2020	A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Software (NFVIS)-bundled images for Cisco ENCS 5400-W Series and CSP 5000-W Series appliances could allow an unauthenticated, remote attacker to log into the NFVIS…
CVE-2020-3382	Cisco Systems, Inc. Data Center Network Manager	Cri	0.64	9.8	0.02		Jul 31, 2020	A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different…
CVE-2020-3375	Cisco Systems, Inc. SD-WAN	Cri	0.64	9.8	0.04		Jul 31, 2020	A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic…
CVE-2020-3357	Cisco Systems, Inc. Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers	Cri	0.64	9.8	0.04		Jul 16, 2020	A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause the device to reload,…
CVE-2020-3330	Cisco Systems, Inc. Rv110w	Cri	0.64	9.8	0.03		Jul 16, 2020	A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default…
CVE-2020-3323	Cisco Systems, Inc. Small Business RV110W	Cri	0.64	9.8	0.06		Jul 16, 2020	A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of…
CVE-2020-3144	Cisco Systems, Inc. RV130 VPN Router	Cri	0.64	9.8	0.03		Jul 16, 2020	A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute…
CVE-2020-3140	Cisco Systems, Inc. Prime License Manager	Cri	0.64	9.8	0.03		Jul 16, 2020	A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web…
CVE-2020-3297	Cisco Systems, Inc. Small Business Smart and Managed Switches	Cri	0.64	9.8	0.03		Jul 2, 2020	A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface. The attacker could…
CVE-2020-3258	Cisco Systems, Inc. Cisco iOS	Cri	0.64	9.8	0.05		Jun 3, 2020	Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute…
CVE-2020-3227	Cisco Systems, Inc. iOS Xe	Cri	0.64	9.8	0.03		Jun 3, 2020	A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API commands without proper authorization. The vulnerability is due to incorrect…
CVE-2020-3198	Cisco Systems, Inc. Cisco iOS	Cri	0.64	9.8	0.04		Jun 3, 2020	Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute…
CVE-2020-3280	Cisco Systems, Inc. Unified Contact Center Express	Cri	0.64	9.8	0.07		May 22, 2020	A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied…
CVE-2020-3318	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Cri	0.64	9.8	0.01		May 6, 2020	Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the…
CVE-2020-3125	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Cri	0.64	9.8	0.02		May 6, 2020	A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured…
CVE-2013-5122	Cisco Systems, Inc. Linksys Ea2700 Firmware	Cri	0.64	9.8	0.04		Jan 7, 2020	Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access
CVE-2019-15958	Cisco Systems, Inc. Prime Infrastructure	Cri	0.64	9.8	0.03		Nov 26, 2019	A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to…
CVE-2019-15260	Cisco Systems, Inc. Aironet 1800 Firmware	Cri	0.64	9.8	0.03		Oct 16, 2019	A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected…
CVE-2019-1976	Cisco Systems, Inc. Industrial Network Director	Cri	0.64	9.8	0.02		Sep 5, 2019	A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the…
CVE-2019-1974	Cisco Systems, Inc. Ucs Director	Cri	0.64	9.8	0.04		Aug 21, 2019	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass user authentication and gain access as an…
CVE-2019-1938	Cisco Systems, Inc. Ucs Director	Cri	0.64	9.8	0.05		Aug 21, 2019	A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an affected system. The…
CVE-2019-1971	Cisco Systems, Inc. Nfvis	Cri	0.64	9.8	0.04		Aug 8, 2019	A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root privileges. The vulnerability is due to insufficient input…
CVE-2019-1895	Cisco Systems, Inc. Enterprise NFV Infrastructure Software (NFVIS)	Cri	0.64	9.8	0.02		Aug 7, 2019	A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of an administrative user on an affected device. The…
CVE-2019-1912	Cisco Systems, Inc. Sf220 24p Firmware	Cri	0.64	9.1	0.17		Aug 7, 2019	A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker…
CVE-2019-1804	Cisco Systems, Inc. Nexus 9000	Cri	0.64	9.8	0.03		May 3, 2019	A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is…
CVE-2019-1710	Cisco Systems, Inc. iOS Xr	Cri	0.64	9.8	0.03		Apr 17, 2019	A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vulnerability is due to…

CVE-2021-1295CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1294CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.05
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1293CriFeb 4, 2021
Cisco Systems, Inc.
Rv160w Wireless Ac VPN Router Firmware
risk 0.64cvss 9.8epss 0.05
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1292CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1291CriFeb 4, 2021
Cisco Systems, Inc.
Rv160w Wireless Ac VPN Router Firmware
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1290CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1289CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1142CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1141CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1140CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1139CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1138CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1301CriJan 20, 2021
Cisco Systems, Inc.
SD-WAN
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-1300CriJan 20, 2021
Cisco Systems, Inc.
SD-WAN
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2020-27134CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.02
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27133CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27132CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27127CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-3531CriNov 18, 2020
Cisco Systems, Inc.
IoT Field Network Director
risk 0.64cvss 9.8epss 0.02
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls.…
CVE-2020-3470CriNov 18, 2020
Cisco Systems, Inc.
Unified Computing System Integrated Management Controller
risk 0.64cvss 9.8epss 0.05
Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input.…
CVE-2020-27130CriNov 17, 2020
Cisco Systems, Inc.
Security Manager
risk 0.64cvss 9.1epss 0.66
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could…
CVE-2020-3284CriNov 6, 2020
Cisco Systems, Inc.
iOS Xr
risk 0.64cvss 9.8epss 0.03
A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS…
CVE-2020-3580MedKEVOct 21, 2020
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.64cvss 6.1epss 0.86
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web…
CVE-2019-16028CriSep 23, 2020
Cisco Systems, Inc.
Firepower Management Center
risk 0.64cvss 9.8epss 0.03
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due…
CVE-2020-3446CriAug 26, 2020
Cisco Systems, Inc.
Wide Area Application Services
risk 0.64cvss 9.8epss 0.01
A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Software (NFVIS)-bundled images for Cisco ENCS 5400-W Series and CSP 5000-W Series appliances could allow an unauthenticated, remote attacker to log into the NFVIS…
CVE-2020-3382CriJul 31, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.64cvss 9.8epss 0.02
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different…
CVE-2020-3375CriJul 31, 2020
Cisco Systems, Inc.
SD-WAN
risk 0.64cvss 9.8epss 0.04
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic…
CVE-2020-3357CriJul 16, 2020
Cisco Systems, Inc.
Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers
risk 0.64cvss 9.8epss 0.04
A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause the device to reload,…
CVE-2020-3330CriJul 16, 2020
Cisco Systems, Inc.
Rv110w
risk 0.64cvss 9.8epss 0.03
A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default…
CVE-2020-3323CriJul 16, 2020
Cisco Systems, Inc.
Small Business RV110W
risk 0.64cvss 9.8epss 0.06
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of…
CVE-2020-3144CriJul 16, 2020
Cisco Systems, Inc.
RV130 VPN Router
risk 0.64cvss 9.8epss 0.03
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute…
CVE-2020-3140CriJul 16, 2020
Cisco Systems, Inc.
Prime License Manager
risk 0.64cvss 9.8epss 0.03
A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web…
CVE-2020-3297CriJul 2, 2020
Cisco Systems, Inc.
Small Business Smart and Managed Switches
risk 0.64cvss 9.8epss 0.03
A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface. The attacker could…
CVE-2020-3258CriJun 3, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.64cvss 9.8epss 0.05
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute…
CVE-2020-3227CriJun 3, 2020
Cisco Systems, Inc.
iOS Xe
risk 0.64cvss 9.8epss 0.03
A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API commands without proper authorization. The vulnerability is due to incorrect…
CVE-2020-3198CriJun 3, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute…
CVE-2020-3280CriMay 22, 2020
Cisco Systems, Inc.
Unified Contact Center Express
risk 0.64cvss 9.8epss 0.07
A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied…
CVE-2020-3318CriMay 6, 2020
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.64cvss 9.8epss 0.01
Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the…
CVE-2020-3125CriMay 6, 2020
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.64cvss 9.8epss 0.02
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured…
CVE-2013-5122CriJan 7, 2020
Cisco Systems, Inc.
Linksys Ea2700 Firmware
risk 0.64cvss 9.8epss 0.04
Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access
CVE-2019-15958CriNov 26, 2019
Cisco Systems, Inc.
Prime Infrastructure
risk 0.64cvss 9.8epss 0.03
A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to…
CVE-2019-15260CriOct 16, 2019
Cisco Systems, Inc.
Aironet 1800 Firmware
risk 0.64cvss 9.8epss 0.03
A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected…
CVE-2019-1976CriSep 5, 2019
Cisco Systems, Inc.
Industrial Network Director
risk 0.64cvss 9.8epss 0.02
A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the…
CVE-2019-1974CriAug 21, 2019
Cisco Systems, Inc.
Ucs Director
risk 0.64cvss 9.8epss 0.04
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass user authentication and gain access as an…
CVE-2019-1938CriAug 21, 2019
Cisco Systems, Inc.
Ucs Director
risk 0.64cvss 9.8epss 0.05
A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an affected system. The…
CVE-2019-1971CriAug 8, 2019
Cisco Systems, Inc.
Nfvis
risk 0.64cvss 9.8epss 0.04
A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root privileges. The vulnerability is due to insufficient input…
CVE-2019-1895CriAug 7, 2019
Cisco Systems, Inc.
Enterprise NFV Infrastructure Software (NFVIS)
risk 0.64cvss 9.8epss 0.02
A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of an administrative user on an affected device. The…
CVE-2019-1912CriAug 7, 2019
Cisco Systems, Inc.
Sf220 24p Firmware
risk 0.64cvss 9.1epss 0.17
A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker…
CVE-2019-1804CriMay 3, 2019
Cisco Systems, Inc.
Nexus 9000
risk 0.64cvss 9.8epss 0.03
A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is…
CVE-2019-1710CriApr 17, 2019
Cisco Systems, Inc.
iOS Xr
risk 0.64cvss 9.8epss 0.03
A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vulnerability is due to…

Page 5 of 140