NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE Software
view advisory published 2025-09-25
Cisco heeft kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE Software.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-20352US | —OT critical | KEV | ||
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:
An authenticated, remote… | ||||
| CVE-2025-20338US | medium6.7 | — | ||
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underly… | ||||
| CVE-2025-20327US | — | — | ||
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected de… | ||||
| CVE-2025-20316US | — | — | ||
A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote atta… | ||||
| CVE-2025-20315US | — | — | ||
A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to… | ||||
| CVE-2025-20314US | — | — | ||
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected de… | ||||
| CVE-2025-20313US | — | — | ||
Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to th… | ||||
| CVE-2025-20312US | — | — | ||
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… | ||||
| CVE-2025-20311US | — | — | ||
A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an… | ||||
| CVE-2025-20293US | — | — | ||
A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attac… | ||||
| CVE-2025-20240US | — | — | ||
A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS)… | ||||
| CVE-2025-20160US | — | — | ||
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data… | ||||
| CVE-2025-20149US | — | — | ||
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resultin… | ||||
| CVE-2025-20334US | — | — | ||
A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying opera… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan