Cisco IOS XE vulnerabilities
526 known vulnerabilities affecting cisco/ios_xe.
Total CVEs
526
CISA KEV
27
actively exploited
Public exploits
8
Exploited in wild
33
Severity breakdown
CRITICAL22HIGH339MEDIUM164LOW1
Vulnerabilities
Page 14 of 27
CVE-2015-0643P3HIGHCVSS 7.8v3.2s.0v3.2s.1+54 more2015-03-26
CVE-2015-0643 [HIGH] CWE-399 CVE-2015-0643: Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.
Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (memory consumption and device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, a
nvd
CVE-2016-6381P3HIGHCVSS 7.5v3.1.0sv3.1.1s+103 more2016-10-05
CVE-2016-6381 [HIGH] CWE-399 CVE-2016-6381: Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to
Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.
nvd
CVE-2016-6379P3HIGHCVSS 7.5v3.14.0sv3.14.1s+14 more2016-10-05
CVE-2016-6379 [HIGH] CWE-20 CVE-2016-6379: Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of ser
Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID CSCuu35089.
nvd
CVE-2016-6386P3HIGHCVSS 7.5v3.1.0sv3.1.0sg+116 more2016-10-05
CVE-2016-6386 [HIGH] CWE-399 CVE-2016-6386: Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial
Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.
nvd
CVE-2015-4291P3HIGHCVSS 7.8v2.1.0v2.1.1+11 more2015-08-01
CVE-2015-4291 [HIGH] CWE-399 CVE-2015-4291: Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to
Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted series of fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCtd72617.
nvd
CVE-2015-0650P3HIGHCVSS 7.8v3.9s.0v3.9s.1+14 more2015-03-26
CVE-2015-0650 [HIGH] CWE-20 CVE-2015-0650: The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, an
The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) by sending malformed mDNS UDP packets over (1) IPv4 or (2)
nvd
CVE-2015-0640P3HIGHCVSS 7.8v3.1s.0v3.1s.1+46 more2015-03-26
CVE-2015-0640 [HIGH] CWE-20 CVE-2015-0640: The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S
The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via large IP packets that require NAT and HSL processing after fragmentation, aka Bug ID CSCuo2574
nvd
CVE-2009-2051P3HIGHCVSS 7.8≥ 2.5.0, ≤ 2.6.12009-08-27
CVE-2009-2051 [HIGH] CVE-2009-2051: Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Ci
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message t
nvd
CVE-2012-3949P3HIGHCVSS 7.8v3.3.0sgv3.3.1s+11 more2012-09-27
CVE-2012-3949 [HIGH] CWE-20 CVE-2012-3949: The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5,
The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a cra
nvd
CVE-2014-3356P3HIGHCVSS 7.8v3.3\(.0\)xov3.6.0s+15 more2014-09-25
CVE-2014-3356 [HIGH] CWE-119 CVE-2014-3356: The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS a
The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCue22753.
nvd
CVE-2014-3355P3HIGHCVSS 7.8v3.3\(.0\)xov3.6.0s+15 more2014-09-25
CVE-2014-3355 [HIGH] CWE-119 CVE-2014-3355: The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS a
The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCug75942.
nvd
CVE-2016-6385P3HIGHCVSS 7.5v3.2.0jav3.2.0se+30 more2016-10-05
CVE-2016-6385 [HIGH] CWE-399 CVE-2016-6385: Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and I
Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy82367.
nvd
CVE-2015-0645P3HIGHCVSS 7.8v3.1s.0v3.1s.1+38 more2015-03-26
CVE-2015-0645 [HIGH] CWE-20 CVE-2015-0645: The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S,
The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuq59131.
nvd
CVE-2015-0641P3HIGHCVSS 7.8v3.1s.0v3.1s.1+40 more2015-03-26
CVE-2015-0641 [HIGH] CWE-20 CVE-2015-0641: Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0
Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via crafted IPv6 packets, aka Bug ID CSCub68073.
nvd
CVE-2015-0639P3HIGHCVSS 7.8v3.6sv3.6s.0+9 more2015-03-26
CVE-2015-0639 [HIGH] CWE-20 CVE-2015-0639: The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.
The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attackers to cause a denial of service (device reload) via malfor
nvd
CVE-2015-6270P3HIGHCVSS 7.8v2.2.1v2.2.22015-08-31
CVE-2015-6270 [HIGH] CWE-399 CVE-2015-6270: Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (
Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv6 packet, aka Bug ID CSCsv98555.
nvd
CVE-2015-6269P3HIGHCVSS 7.8v2.2.1v2.2.22015-08-31
CVE-2015-6269 [HIGH] CWE-399 CVE-2015-6269: Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (
Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted (1) IPv4 or (2) IPv6 packet, aka Bug ID CSCsw69990.
nvd
CVE-2015-6273P3HIGHCVSS 7.8v2.2.1v2.2.2+3 more2015-08-29
CVE-2015-6273 [HIGH] CWE-399 CVE-2015-6273: Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Re
Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, which allows remote attackers to cause a denial of service (Embedded Services Processor crash) via crafted IP packets, aka Bug IDs CSCtf87624, CSCte93229, CSCtd19103, and CSCti63623.
nvd
CVE-2015-0685P3HIGHCVSS 7.8≤ 3.7s.42015-04-03
CVE-2015-0685 [HIGH] CWE-20 CVE-2015-0685: Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which all
Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP packets, aka Bug ID CSCub31873.
nvd
CVE-2013-5545P3HIGHCVSS 7.8v3.9.0sv3.9.1s2013-10-31
CVE-2013-5545 [HIGH] CWE-20 CVE-2013-5545: The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote atta
The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending many PPTP packets over NAT, aka Bug ID CSCuh19936.
nvd