Class familyCisco · IOS and IOS XE Software
Cisco IOS and IOS XE Software input validation flaws, 2017–2019
8 IOS and IOS XE Software CVEs with CWE-20 weaknesses, 17 Mar 2017 to 28 Mar 2019. 5 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2017’17
3 2018’18
3 2019’19
In CISA KEVNot in KEV
20172 CVEs, 2 in KEV
20183 CVEs, 3 in KEV
20193 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2017-3881KEV | 17 Mar 2017 | Cisco IOS and IOS XE Remote Code Execution Vulnerability | Grouped by weakness | 73.7 |
| CVE-2017-12240KEV | 29 Sep 2017 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | Grouped by weakness | 64.2 |
| CVE-2018-0171KEV | 28 Mar 2018 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | Grouped by weakness | 76.0 |
| CVE-2018-0172KEV | 28 Mar 2018 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Grouped by weakness | 63.0 |
| CVE-2018-0173KEV | 28 Mar 2018 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Grouped by weakness | 62.9 |
| CVE-2019-1738 | 27 Mar 2019 | Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerability | Grouped by weakness | 23.0 |
| CVE-2019-1746 | 27 Mar 2019 | Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability | Grouped by weakness | 15.3 |
| CVE-2019-1752 | 28 Mar 2019 | Cisco IOS and IOS XE Software ISDN Interface Denial of Service Vulnerability | Grouped by weakness | 23.0 |