Cisco

Ios Xe

576 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-20437

  • EPSS 0.31%
  • Veröffentlicht 25.09.2024 17:15:16
  • Zuletzt bearbeitet 24.10.2024 19:45:01

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack and execute commands on the CLI of an affected device. This vulner...

8.6

CVE-2024-20455

  • EPSS 0.66%
  • Veröffentlicht 25.09.2024 17:15:16
  • Zuletzt bearbeitet 24.10.2024 19:47:49

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio...

6.5

CVE-2024-20414

  • EPSS 0.28%
  • Veröffentlicht 25.09.2024 17:15:15
  • Zuletzt bearbeitet 02.10.2024 20:02:22

A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system through the web UI. This vulnerabilit...

7.5

CVE-2024-20433

  • EPSS 0.63%
  • Veröffentlicht 25.09.2024 17:15:15
  • Zuletzt bearbeitet 03.10.2024 13:34:37

A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (...

7.4

CVE-2024-20313

  • EPSS 0.26%
  • Veröffentlicht 24.04.2024 21:15:46
  • Zuletzt bearbeitet 21.11.2024 08:52:20

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability...

7.5

CVE-2024-20307

  • EPSS 0.73%
  • Veröffentlicht 27.03.2024 18:15:09
  • Zuletzt bearbeitet 30.07.2025 12:59:13

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading. This vulnerability exists because ...

7.5

CVE-2024-20308

  • EPSS 0.8%
  • Veröffentlicht 27.03.2024 18:15:09
  • Zuletzt bearbeitet 30.06.2025 15:13:39

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because...

5.3

CVE-2024-20316

  • EPSS 0.45%
  • Veröffentlicht 27.03.2024 17:15:53
  • Zuletzt bearbeitet 30.07.2025 13:25:44

A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL). This vulnerabil...

5.5

CVE-2024-20324

  • EPSS 0.15%
  • Veröffentlicht 27.03.2024 17:15:53
  • Zuletzt bearbeitet 30.07.2025 13:00:20

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This vulnerability is due to improper privilege checks. An attacker could ex...

7.4

CVE-2024-20354

  • EPSS 0.29%
  • Veröffentlicht 27.03.2024 17:15:53
  • Zuletzt bearbeitet 13.08.2025 17:18:10

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is d...