Cisco IOS and IOS XE

12 known vulnerabilities in Cisco IOS and IOS XE, 3 critical, 12 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2018-0174 CVSS 8.6 high · actively exploited Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
  • CVE-2018-0173 CVSS 8.6 high · actively exploited Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
  • CVE-2018-0172 CVSS 8.6 high · actively exploited Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
  • CVE-2018-0171 CVSS 9.8 critical · actively exploited Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
  • CVE-2018-0159 CVSS 7.5 high · actively exploited Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
  • CVE-2018-0158 CVSS 8.6 high · actively exploited Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
  • CVE-2018-0156 CVSS 7.5 high · actively exploited Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
  • CVE-2018-0155 CVSS 8.6 high · actively exploited Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
  • CVE-2018-0151 CVSS 9.8 critical · actively exploited Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
  • CVE-2017-12240 CVSS 9.8 critical · actively exploited Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

Latest vulnerabilities

  • CVE-2018-0174 CVSS 8.6 high · actively exploited Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
  • CVE-2018-0173 CVSS 8.6 high · actively exploited Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
  • CVE-2018-0172 CVSS 8.6 high · actively exploited Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
  • CVE-2018-0171 CVSS 9.8 critical · actively exploited Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
  • CVE-2018-0159 CVSS 7.5 high · actively exploited Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
  • CVE-2018-0158 CVSS 8.6 high · actively exploited Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
  • CVE-2018-0156 CVSS 7.5 high · actively exploited Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
  • CVE-2018-0155 CVSS 8.6 high · actively exploited Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
  • CVE-2018-0151 CVSS 9.8 critical · actively exploited Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
  • CVE-2017-12240 CVSS 9.8 critical · actively exploited Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
  • CVE-2017-12237 CVSS 7.5 high · actively exploited Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
  • CVE-2017-6663 CVSS 6.5 medium · actively exploited Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability