Cisco

Ios Xe

554 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.6

CVE-2024-20467

  • EPSS 17.21%
  • Published 25.09.2024 17:15:17
  • Last modified 03.10.2024 20:09:50

A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due ...

8.6

CVE-2024-20480

  • EPSS 0.24%
  • Published 25.09.2024 17:15:17
  • Last modified 03.10.2024 20:07:33

A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial ...

4.3

CVE-2024-20434

  • EPSS 0.06%
  • Published 25.09.2024 17:15:16
  • Last modified 08.10.2024 16:20:30

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of an affected device. This vulnerability is due to improper handling of frames with VLAN ...

7.5

CVE-2024-20436

  • EPSS 0.64%
  • Published 25.09.2024 17:15:16
  • Last modified 08.10.2024 21:00:00

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerabilit...

8.8

CVE-2024-20437

  • EPSS 0.2%
  • Published 25.09.2024 17:15:16
  • Last modified 24.10.2024 19:45:01

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack and execute commands on the CLI of an affected device. This vulner...

8.6

CVE-2024-20455

  • EPSS 0.55%
  • Published 25.09.2024 17:15:16
  • Last modified 24.10.2024 19:47:49

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio...

6.5

CVE-2024-20414

  • EPSS 0.09%
  • Published 25.09.2024 17:15:15
  • Last modified 02.10.2024 20:02:22

A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system through the web UI. This vulnerabilit...

7.5

CVE-2024-20433

  • EPSS 0.42%
  • Published 25.09.2024 17:15:15
  • Last modified 03.10.2024 13:34:37

A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (...

7.4

CVE-2024-20313

  • EPSS 0.06%
  • Published 24.04.2024 21:15:46
  • Last modified 21.11.2024 08:52:20

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability...

7.5

CVE-2024-20307

  • EPSS 1.5%
  • Published 27.03.2024 18:15:09
  • Last modified 30.07.2025 12:59:13

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading. This vulnerability exists because ...