Vendor
Cisco
102 of 266 Cisco CVEs in Patchfirst (38%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild, 7 of them used by ransomware.
- CVEs
- 266
- In CISA KEV
- 10238%
- Known ransomware use
- 7
- Median days to KEV
- 1,074
- from publication
- Latest KEV listing
- 29 Oct 2026
Products
In KEVOther CVEs
- IOS and IOS XE Software In KEV: 14 CVEs: 14
- Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) In KEV: 6 CVEs: 6
- IOS software In KEV: 6 CVEs: 6
- IOS XR In KEV: 6 CVEs: 6
- Catalyst SD-WAN Manager In KEV: 5 CVEs: 5
- Small Business RV160, RV260, RV340, and RV345 Series Routers In KEV: 5 CVEs: 5
- Adaptive Security Appliance (ASA) In KEV: 4 CVEs: 4
- IOS and IOS XE In KEV: 4 CVEs: 4
- IOS Software In KEV: 4 CVEs: 4
- Identity Services Engine In KEV: 3 CVEs: 3
Top ATT&CK techniques
What attackers do with Cisco CVEs- T1190Exploit Public-Facing Application CVEs: 100
- T1059Command and Scripting Interpreter CVEs: 66
- T1499.004Application or System Exploitation CVEs: 47
- T1078Valid Accounts CVEs: 45
- T1068Exploitation for Privilege Escalation CVEs: 22
Counts are Cisco CVEs linked to the technique. Each link’s provenance is on the CVE page.
Cisco CVEs
Top 100 of 266 by priority- CVE-2023-20198Cisco IOS XE Web UI Privilege Escalation VulnerabilityCisco · IOS XE Web UIKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1136Create Account2 reports99.6%Top 0.05%86.1priority
- CVE-2024-20353Cisco ASA and FTD Denial of Service VulnerabilityCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitHigh · 8.6T1608.001Upload MalwareT1190Exploit Public-Facing Application+2 more · 2 reports69.8%Top 0.63%85.0priority
- CVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management…Cisco · Secure Firewall Management Center (FMC)KEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter44.4%Top 1.2%84.8priority
- CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco · Catalyst SD-WANKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application4 reports91.8%Top 0.18%83.9priority
- CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application1 report88.7%Top 0.23%83.8priority
- CVE-2024-20359Cisco ASA and FTD Privilege Escalation VulnerabilityCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitMedium · 6.0T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 2 reports18.8%Top 2.7%82.8priority
- CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityCisco · Secure Firewall Management Center (FMC)KEVRansomwareMedium · 5.3T1078Valid AccountsT1005Data from Local System1 report35.1%Top 1.6%80.3priority
- CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCisco · Identity Services EngineKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts75.6%Top 0.48%79.9priority
- CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow…Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEVPublic exploitCritical · 9.9T1133External Remote ServicesT1059Command and Scripting Interpreter5 reports71.2%Top 0.59%79.8priority
- CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCisco · Catalyst SD-WAN ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts38.9%Top 1.4%79.6priority
- CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCisco · Secure Email GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter29.5%Top 1.8%79.5priority
- CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization…Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation5 reports87.1%Top 0.25%79.0priority
- CVE-2020-3433Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability10.0%Top 4.4%77.6priority
- CVE-2020-3580Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVRansomwarePublic exploitMedium · 6.1T1204.001Malicious LinkT1059Command and Scripting Interpreter+1 more85.6%Top 0.28%77.2priority
- CVE-2020-3153Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCisco · AnyConnect SecureKEVRansomwarePublic exploitMedium · 6.5T1078Valid AccountsT1574.001DLL+1 more28.5%Top 1.9%77.2priority
- CVE-2022-20775Cisco SD-WAN Path Traversal VulnerabilityCisco · SD-WANKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1 report12.5%Top 3.8%76.6priority
- CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCisco · Secure Email GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more2.2%Top 18%76.3priority
- CVE-2021-34730Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service…Cisco · Cisco Small Business RV Series Router FirmwarePublic exploitCritical · 9.818.5%Top 2.8%76.3priority
- CVE-2018-0171Cisco IOS and IOS XE Software Smart Install Remote Code Execution VulnerabilityCisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services+1 more · 2 reports99.5%Top 0.06%76.0priority
- CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCisco · Catalyst SD-WAN Controller and ManagerKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more89.3%Top 0.22%75.0priority
- CVE-2025-20393Cisco Multiple Products Improper Input Validation VulnerabilityCisco · Multiple ProductsKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter32.4%Top 1.7%74.7priority
- CVE-2023-20273Cisco IOS XE Web UI Command Injection VulnerabilityCisco · Cisco IOS XE Web UIKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 2 reports92.9%Top 0.17%74.1priority
- CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityCisco · Unified Communications ManagerKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1105Ingress Tool Transfer88.5%Top 0.23%74.0priority
- CVE-2023-20269Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityCisco · Adaptive Security Appliance and Firepower Threat DefenseKEVRansomwareCritical · 9.1T1133External Remote ServicesT1078Valid Accounts26.6%Top 2%74.0priority
- CVE-2024-20399Cisco NX-OS Command Injection VulnerabilityCisco · NX-OSKEVPublic exploitMedium · 6.7T1078Valid AccountsT1059Command and Scripting Interpreter3 reports4.3%Top 8.9%73.7priority
- CVE-2017-3881Cisco IOS and IOS XE Remote Code Execution VulnerabilityCisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report99.0%Top 0.07%73.7priority
- CVE-2025-20282Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco · Cisco Identity Services Engine SoftwarePublic exploitCritical · 10.038.7%Top 1.4%73.5priority
- CVE-2008-4128Cisco IOS Cross-Site Request Forgery Vulnerability33.9%Top 1.6%73.3priority
- CVE-2026-20045Cisco Unified Communications Products Code Injection VulnerabilityCisco · Unified Communications ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4.5%Top 8.4%73.2priority
- CVE-2020-3259Cisco ASA and FTD Information Disclosure VulnerabilityCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVRansomwareHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System71.5%Top 0.59%73.1priority
- CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityCisco · Catalyst SD-WAN ManagerKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation25.3%Top 2.1%73.0priority
- CVE-2017-6736Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 1 report70.4%Top 0.62%72.9priority
- CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCisco · Catalyst SD-WAN ManagerKEVPublic exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation29.1%Top 1.8%72.2priority
- CVE-2019-1653Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityCisco · Small Business RV320 and RV325 RoutersKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1082System Information Discovery+2 more · 1 report99.9%Top 0.04%72.1priority
- CVE-2018-0296Cisco Adaptive Security Appliance (ASA) Denial-of-Service VulnerabilityCisco · Adaptive Security Appliance (ASA)KEVPublic exploitHigh · 7.5T1005Data from Local System1 report99.9%Top 0.03%72.1priority
- CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection…Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) KEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1.0%Top 37%71.6priority
- CVE-2025-20281Cisco Identity Services Engine Injection VulnerabilityCisco · Identity Services EngineKEVPublic exploitCritical · 10.0T1106Native APIT1059Command and Scripting Interpreter97.6%Top 0.1%70.0priority
- CVE-2021-1498Cisco HyperFlex HX Data Platform Command Injection VulnerabilityCisco · HyperFlex HXKEVPublic exploitCritical · 9.8T1133External Remote ServicesT1059Command and Scripting Interpreter>99.9%Top 0.01%69.9priority
- CVE-2021-1497Cisco HyperFlex HX Installer Virtual Machine Command Injection VulnerabilityCisco · HyperFlex HXKEVPublic exploitCritical · 9.8T1133External Remote ServicesT1059Command and Scripting Interpreter99.9%Top 0.03%69.9priority
- CVE-2024-20439Cisco Smart Licensing Utility Static Credential VulnerabilityCisco · Smart Licensing UtilityKEVPublic exploitCritical · 9.8T1106Native APIT1552Unsecured Credentials97.1%Top 0.11%69.8priority
- CVE-2020-3161Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service VulnerabilityCisco · Cisco IP PhonesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more83.9%Top 0.31%69.8priority
- CVE-2022-20699Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersKEVPublic exploitCritical · 9.8T1133External Remote ServicesT1059.004Unix Shell72.5%Top 0.56%69.7priority
- CVE-2024-20404A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…Cisco · Cisco Unified Contact Center EnterprisePublic exploitHigh · 7.222.6%Top 2.3%69.6priority
- CVE-2022-20707Cisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router FirmwarePublic exploitCritical · 10.075.3%Top 0.49%69.2priority
- CVE-2016-6366Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityCisco · Adaptive Security Appliance (ASA)KEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services87.6%Top 0.24%69.1priority
- CVE-2019-1663Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution VulnerabilityCisco · RV110W Wireless-N VPN FirewallPublic exploitCritical · 9.895.7%Top 0.13%68.8priority
- CVE-2017-6742Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1574Hijack Execution FlowT1059Command and Scripting Interpreter+2 more21.4%Top 2.4%68.7priority
- CVE-2020-3118Cisco IOS XR Software Discovery Protocol Format String VulnerabilityCisco · IOS XRKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services11.7%Top 3.9%68.4priority
- CVE-2022-20705Cisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router FirmwarePublic exploitCritical · 10.080.0%Top 0.39%68.3priority
- CVE-2020-3452Cisco ASA and FTD Read-Only Path Traversal VulnerabilityCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitHigh · 7.5T1005Data from Local System>99.9%Top 0.01%68.2priority
- CVE-2016-6415Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityCisco · IOS, IOS XR, and IOS XEKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System87.7%Top 0.24%68.2priority
- CVE-2025-20352Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityCisco · IOS and IOS XEKEVPublic exploitHigh · 7.7T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter41.5%Top 1.3%68.1priority
- CVE-2025-20188A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client…Cisco · Cisco IOS XE SoftwarePublic exploitCritical · 10.027.5%Top 1.9%68.0priority
- CVE-2024-20419A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an…Cisco · Cisco Smart Software Manager On-PremPublic exploitCritical · 10.080.9%Top 0.37%68.0priority
- CVE-2019-1652Cisco Small Business Routers Improper Input Validation VulnerabilityCisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter95.9%Top 0.13%68.0priority
- CVE-2016-6367Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution VulnerabilityCisco · Adaptive Security Appliance (ASA)KEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation22.6%Top 2.3%68.0priority
- CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCisco · Catalyst SD-WAN ManagerKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System31.5%Top 1.7%67.9priority
- CVE-2019-1821Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution VulnerabilitiesCisco · Cisco Prime InfrastructurePublic exploitHigh · 8.898.1%Top 0.09%67.5priority
- CVE-2025-20363A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…Cisco · IOSCritical · 9.02 reports6.9%Top 5.9%67.3priority
- CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCisco · Catalyst SD-WAN ManagerKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1552Unsecured Credentials7.3%Top 5.6%67.1priority
- CVE-2020-3187Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal…Cisco · Cisco Adaptive Security Appliance (ASA) SoftwarePublic exploitCritical · 9.196.5%Top 0.12%67.0priority
- CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCisco · Catalyst SD-WAN MangerKEVMedium · 5.4T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation25.8%Top 2%66.4priority
- CVE-2021-1473Cisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router FirmwarePublic exploitMedium · 5.364.4%Top 0.77%65.8priority
- CVE-2021-1472Cisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router FirmwarePublic exploitMedium · 5.372.0%Top 0.57%65.8priority
- CVE-2020-26073Cisco SD-WAN vManage Directory Traversal VulnerabilityCisco · Cisco Catalyst SD-WAN ManagerPublic exploitHigh · 7.512.6%Top 3.8%65.2priority
- CVE-2024-20440A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive…Cisco · Cisco Smart License UtilityPublic exploitHigh · 7.551.9%Top 1%65.0priority
- CVE-2025-20337Cisco Identity Services Engine Injection VulnerabilityCisco · Identity Services EngineKEVCritical · 10.0T1106Native APIT1059Command and Scripting Interpreter74.5%Top 0.51%64.9priority
- CVE-2018-0125Cisco VPN Routers Remote Code Execution VulnerabilityCisco · VPN RoutersKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more55.2%Top 0.97%64.7priority
- CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference…Cisco · Secure Firewall ASA Software and Cisco Secure FTD SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation0.9%Top 40%64.4priority
- CVE-2018-0147Cisco Secure Access Control System Java Deserialization VulnerabilityCisco · Secure Access Control System (ACS)KEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter18.2%Top 2.8%64.3priority
- CVE-2018-0151Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more14.2%Top 3.4%64.2priority
- CVE-2017-12240Cisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more13.8%Top 3.5%64.2priority
- CVE-2017-6737Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more45.0%Top 1.2%63.9priority
- CVE-2023-20073Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload VulnerabilityCisco · Cisco Small Business RV Series Router FirmwarePublic exploitMedium · 5.390.1%Top 0.2%63.7priority
- CVE-2022-20700Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell5.7%Top 7%63.5priority
- CVE-2017-6743Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more10.9%Top 4.1%63.3priority
- CVE-2017-6740Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more11.1%Top 4.1%63.3priority
- CVE-2017-6739Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more10.9%Top 4.1%63.3priority
- CVE-2017-6738Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more10.9%Top 4.1%63.3priority
- CVE-2026-20029Cisco Identity Services Engine XML External Entity Processing Information Disclosure VulnerabilityCisco · Cisco Identity Services Engine SoftwareMedium · 4.96.1%Top 6.6%63.2priority
- CVE-2018-0172Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.8%Top 5.3%63.0priority
- CVE-2017-6744Cisco IOS Software SNMP Remote Code Execution VulnerabilityCisco · IOS softwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more7.3%Top 5.6%63.0priority
- CVE-2015-0666Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityCisco · Prime Data Center Network Manager (DCNM)KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System40.4%Top 1.4%63.0priority
- CVE-2022-20708Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersKEVHigh · 8.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation14.9%Top 3.3%62.9priority
- CVE-2018-0174Cisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityCisco · IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.6%Top 5.5%62.9priority
- CVE-2018-0173Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.6%Top 5.5%62.9priority
- CVE-2018-0158Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability7.2%Top 5.7%62.9priority
- CVE-2018-0155Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service VulnerabilityCisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.7%Top 5.4%62.9priority
- CVE-2023-20118Cisco Small Business RV Series Routers Command Injection VulnerabilityCisco · Small Business RV Series RoutersKEVHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter+2 more54.1%Top 1%62.8priority
- CVE-2022-20703Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersKEVHigh · 8.0T1203Exploitation for Client Execution9.2%Top 4.7%62.7priority
- CVE-2019-15271Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityCisco · RV Series RoutersKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter5.5%Top 7.2%62.7priority
- CVE-2022-20701Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersKEVHigh · 7.8T1078Valid AccountsT1203Exploitation for Client Execution9.7%Top 4.5%62.6priority
- CVE-2018-0156Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service VulnerabilityCisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation9.4%Top 4.6%62.3priority
- CVE-2018-0159Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service VulnerabilityCisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation6.9%Top 6%62.1priority
- CVE-2018-0154Cisco IOS Software Integrated Services Module for VPN Denial-of-Service VulnerabilityCisco · IOS SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service7.1%Top 5.8%62.1priority
- CVE-2017-12237Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability7.1%Top 5.8%62.1priority
- CVE-2017-12235Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.1%Top 5.8%62.1priority
- CVE-2017-12234Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.1%Top 5.8%62.1priority
- CVE-2017-12233Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.1%Top 5.8%62.1priority
- CVE-2017-12231Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation7.1%Top 5.8%62.1priority