Cisco Systems Inc. Cisco IOS

Name: Cisco Systems Inc. Cisco IOS
Brand: Cisco Systems Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

10critical146high78medium1low

updated 2026-10-27

vulnerabilities (269)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-0171US	critical9.8OT critical	99.5% (100th)	KEV	no fix	2018-03-28	192 versions
CVE-2017-6736US	high8.8OT critical	70.4% (99th)	KEV	no fix	2017-07-17	3 versions
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	no fix	2025-09-24	820 versions
CVE-2017-6742US	high8.8OT critical	21.4% (98th)	KEV	no fix	2017-07-17	3 versions
CVE-2017-6737US	high8.8OT critical	45.2% (99th)	KEV	no fix	2017-07-17	3 versions
CVE-2018-0151US	critical9.8OT critical	14.2% (97th)	KEV	no fix	2018-03-28	82 versions
CVE-2017-6740US	high8.8OT critical	11.1% (96th)	KEV	no fix	2017-07-17	3 versions
CVE-2017-6743US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	3 versions
CVE-2017-6739US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	3 versions
CVE-2017-6738US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	3 versions
CVE-2018-0156US	high7.5OT critical	9.36% (95th)	KEV	no fix	2018-03-28	137 versions
CVE-2018-0172US	high8.6OT critical	7.82% (95th)	KEV	no fix	2018-03-28	—
CVE-2018-0155US	high8.6OT critical	7.74% (95th)	KEV	no fix	2018-03-28	2 versions
CVE-2018-0174US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	—
CVE-2018-0173US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	—
CVE-2017-6744US	high8.8OT critical	7.29% (94th)	KEV	no fix	2017-07-17	3 versions
CVE-2018-0158US	high8.6OT critical	7.19% (94th)	KEV	no fix	2018-03-28	15.5(3)s1.1 → 15.5(3)s1.12
CVE-2018-0154US	high7.5OT critical	7.07% (94th)	KEV	no fix	2018-03-28	32 versions
CVE-2017-12237US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	15.0 → 15.6
CVE-2017-12235US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.2 → 15.6
CVE-2017-12234US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.2 → 15.6
CVE-2017-12233US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.2 → 15.6
CVE-2017-12231US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.2 → 15.6
CVE-2018-0159US	high7.5OT critical	6.87% (94th)	KEV	no fix	2018-03-28	3 versions
CVE-2017-6627US	high7.5OT critical	6.16% (93rd)	KEV	no fix	2017-09-07	3 versions
CVE-2017-12319US	medium5.9OT critical	5.24% (92nd)	KEV	no fix	2018-03-27	≤ 15.4(1)S
CVE-2018-0179US	medium5.9OT critical	4.93% (92nd)	KEV	no fix	2018-03-28	3 versions
CVE-2018-0175US	high8.0OT critical	3.48% (89th)	KEV	no fix	2018-03-28	93 versions
CVE-2018-0167US	high8.8OT critical	3.35% (89th)	KEV	no fix	2018-03-28	≤ 5.2.0
CVE-2023-20109US	medium6.6OT critical	2.48% (85th)	KEV	no fix	2023-09-27	—
CVE-2017-12232US	medium6.5OT critical	2.15% (82nd)	KEV	no fix	2017-09-29	15.0 → 15.6
CVE-2017-6663US	medium6.5OT critical	2.12% (82nd)	KEV	no fix	2017-08-07	69 versions
CVE-2017-12238US	medium6.5OT critical	2.02% (81st)	KEV	no fix	2017-09-29	15.0(1)sy1 → 15.4(1)sy
CVE-1999-0524US	low2.1	32.2% (98th)	Exploit	no fix	1997-08-01	—
CVE-2007-5381US	high9.3	14.7% (97th)	Exploit	no fix	2007-10-12	10.3 → 12.4
CVE-1999-0667US	high10.0	13.6% (96th)	Exploit	no fix	1997-09-19	≤ 15
CVE-2008-3821US	medium4.3	5.45% (93rd)	Exploit	no fix	2009-01-16	11.0 → 12.4
CVE-2024-2169US	—	5.40% (93rd)	Exploit	no fix	2024-03-19	—
CVE-2016-1000031US	critical9.8	32.7% (98th)	—	no fix	2016-10-25	≤ FD-1.8.0
CVE-2018-0476US	medium5.9	13.7% (96th)	—	no fix	2018-10-05	3 versions
CVE-2025-20363US	—	6.92% (94th)	—	no fix	2025-09-25	2410 versions
CVE-2017-6741US	high8.8	6.65% (94th)	—	no fix	2017-07-17	3 versions
CVE-2016-6441US	critical9.8	4.90% (92nd)	—	no fix	2016-11-03	7 versions
CVE-2020-3258US	critical9.8	4.76% (92nd)	—	no fix	2020-06-03	83 versions
CVE-2020-3198US	critical9.8	4.58% (92nd)	—	no fix	2020-06-03	83 versions
CVE-2015-6289US	high7.5	4.40% (91st)	—	no fix	2016-06-23	≤ 15.5(3)M
CVE-2015-6280US	high9.3	4.39% (91st)	—	no fix	2015-09-28	9 versions
CVE-2016-1409US	high7.5	3.90% (90th)	—	no fix	2016-05-29	—
CVE-2012-0384US	high7.2OT elevated	3.88% (90th)	—	no fix	2012-03-29	6 versions
CVE-2012-0382US	high7.5	3.81% (90th)	—	no fix	2012-03-29	5 versions

showing 50 of 269

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation80 CVEs
CWE-399CWE-39965 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer26 CVEs
CWE-400Uncontrolled Resource Consumption11 CVEs
CWE-284Improper Access Control10 CVEs
CWE-805Buffer Access with Incorrect Length Value9 CVEs
CWE-787Out-of-bounds Write8 CVEs
CWE-248Uncaught Exception7 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)266 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan