Class familyCisco · IOS and IOS XE
Cisco IOS and IOS XE out-of-bounds write flaws, 2018–2023
3 IOS and IOS XE CVEs with CWE-787 weaknesses, 28 Mar 2018 to 27 Sep 2023. 3 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2018’18
2019’19
2020’20
2021’21
2022’22
1 2023’23
In CISA KEVNot in KEV
20182 CVEs, 2 in KEV
20231 CVE, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2018-0171KEV | 28 Mar 2018 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | Grouped by weakness | 76.0 |
| CVE-2018-0172KEV | 28 Mar 2018 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Grouped by weakness | 63.0 |
| CVE-2023-20109KEV | 27 Sep 2023 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | Grouped by weakness | 59.6 |