CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco IOS and IOS XE SNMP Subsystem Stack Overflow Vulnerability (CVE-2025-20352) Technical Advisory
[Affected Scope] All versions of Cisco IOS and Cisco IOS XE Software with active SNMP services
[Impact] Authenticated attackers can trigger a system reload (DoS) or execute arbitrary code with root privileges (RCE) via crafted SNMP packets
[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access via ACLs, or disable unused SNMP services
Cisco IOS XE Web UI Remote Command Injection and Root Privilege Escalation Vulnerability (CVE-2023-20273) Analysis and Mitigation Guide
[Affected Scope] Cisco IOS XE Software with the Web UI feature enabled on network devices
[Impact] An authenticated, remote attacker can exploit insufficient input validation to inject arbitrary commands into the underlying operating system with root privileges, leading to complete system compromise
[Mitigation] Immediately disable the Web UI feature or upgrade to the latest patched Cisco IOS XE software release
Cisco IOS XE Web UI Remote Privilege Escalation and System Compromise (CVE-2023-20198)
[Affected Scope] Cisco IOS XE Software with the Web UI feature enabled and exposed to the internet
[Impact] Unauthenticated remote attackers can bypass authentication to create a local user with Privilege 15 access, subsequently elevating to root to install a persistent malicious implant
[Mitigation] Immediately disable the Web UI (HTTP/HTTPS Server) feature or restrict access to trusted management networks, and upgrade to the recommended fixed software releases
Cisco IOS and IOS XE Software GET VPN Remote Code Execution and DoS Vulnerability (CVE-2023-20109)
[Affected Scope] Cisco IOS and Cisco IOS XE Software with the Group Encrypted Transport VPN (GET VPN) feature enabled
[Impact] An authenticated, remote attacker with administrative control over a key server or group member can execute arbitrary code or cause a device reload (DoS)
[Mitigation] Apply the official Cisco software updates and restrict GDOI/G-IKEv2 protocol access to authorized infrastructure nodes only
Cisco IOS XE BGP EVPN Implementation Flaw Remote Denial of Service and Routing Table Corruption Vulnerability (CVE-2017-12319)
[Affected Scope] Cisco IOS XE Software releases prior to 16.3 with BGP EVPN configuration enabled
[Impact] Unauthenticated, remote attackers can trigger a device reload or corrupt the BGP routing table, leading to a complete Denial of Service (DoS) and network instability
[Mitigation] Upgrade to Cisco IOS XE Software release 16.3 or later, or disable EVPN configurations if not business-critical
Cisco IOS and IOS XE Autonomic Networking Denial of Service Vulnerability (CVE-2017-6663)
[Affected Scope] Cisco network devices running Cisco IOS or IOS XE Software with the Autonomic Networking feature enabled (specifically Denali-16.2.1, Denali-16.3.1)
[Impact] An unauthenticated, adjacent attacker can cause affected autonomic nodes to reload, leading to a complete Denial of Service (DoS) condition
[Mitigation] Apply official Cisco software updates or disable the Autonomic Networking Infrastructure (ANI) feature if not required