Cisco IOS

Name: Cisco IOS
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical7high4medium0low

updated 2026-10-28

vulnerabilities (55)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	no fix	2025-09-24	727 versions
CVE-2017-6737US	high8.8OT critical	45.2% (99th)	KEV	no fix	2017-07-17	942 versions
CVE-2017-6738US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	337 versions
CVE-2023-20109US	medium6.6OT critical	2.48% (85th)	KEV	no fix	2023-09-27	674 versions
CVE-2025-20363US	—	6.92% (94th)	—	no fix	2025-09-25	2005 versions
CVE-2011-4661US	high7.5	1.01% (63rd)	—	no fix	2020-02-12	≤ before 15.2(1)T
CVE-2024-20308US	high7.5	0.80% (56th)	—	no fix	2024-03-27	631 versions
CVE-2024-20311US	high7.5	0.80% (56th)	—	no fix	2024-03-27	390 versions
CVE-2023-20186US	critical9.1	0.78% (56th)	—	no fix	2023-09-27	614 versions
CVE-2025-20171US	—	0.78% (56th)	—	115.9(3)M11 (Feb 2025)	2025-02-05	1130 versions
CVE-2025-20170US	—	0.78% (56th)	—	115.9(3)M11 (Feb 2025)	2025-02-05	2952 versions
CVE-2025-20169US	—	0.78% (56th)	—	115.9(3)M11 (Feb 2025)	2025-02-05	2952 versions
CVE-2025-20176US	—	0.76% (55th)	—	115.9(3)M11 (Feb 2025)	2025-02-05	514 versions
CVE-2025-20175US	—	0.76% (55th)	—	15.5(1)SY15 (Mar 2025)	2025-02-05	897 versions
CVE-2025-20174US	—	0.76% (55th)	—	15.5(1)SY15 (Mar 2025)	2025-02-05	222 versions
CVE-2025-20173US	—	0.76% (55th)	—	115.9(3)M11 (Feb 2025)	2025-02-05	964 versions
CVE-2025-20172US	—	0.76% (55th)	—	115.9(3)M11 (Feb 2025)	2025-02-05	681 versions
CVE-2024-20307US	high7.5	0.73% (54th)	—	no fix	2024-03-27	147 versions
CVE-2025-20225US	—	0.71% (54th)	—	no fix	2025-08-14	420 versions
CVE-2024-20433US	high7.5	0.63% (50th)	—	no fix	2024-09-25	2037 versions
CVE-2025-20239US	—	0.62% (49th)	—	no fix	2025-08-14	238 versions
CVE-2026-20301US	—	0.57% (47th)	—	no fix	2026-08-05	140 versions
CVE-2025-20142US	—	0.55% (46th)	—	7.9.21	2025-03-12	3 versions
CVE-2025-20146US	—	0.54% (45th)	—	7.9.21	2025-03-12	3 versions
CVE-2025-20334US	—	0.50% (43rd)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20315US	—	0.44% (38th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20160US	—	0.43% (37th)	—	no fix	2025-09-24	125 versions
CVE-2025-20196US	—	0.42% (36th)	—	no fix	2025-05-07	≤ N/A
CVE-2024-20465US	medium5.8	0.42% (36th)	—	no fix	2024-09-25	4 versions
CVE-2025-20327US	—	0.40% (34th)	—	no fix	2025-09-24	30 versions
CVE-2025-20312US	—	0.40% (34th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2026-20086US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20084US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20012US	—	0.36% (30th)	—	no fix	2026-03-25	554 versions
CVE-2026-20114US	—	0.35% (29th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2025-20164US	—OT elevated	0.34% (27th)	—	no fix	2025-05-07	75 versions
CVE-2025-20316US	—	0.34% (27th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20240US	—	0.34% (27th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20338US	medium6.7	0.30% (22nd)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2026-20125US	—	0.29% (22nd)	—	no fix	2026-03-25	944 versions
CVE-2024-20276US	—	0.29% (22nd)	—	no fix	2024-03-27	7 versions
CVE-2025-20137US	—	0.29% (21st)	—	no fix	2025-05-07	35 versions
CVE-2024-20414US	medium6.5	0.26% (18th)	—	no fix	2024-09-25	30 versions
CVE-2024-20312US	—	0.26% (17th)	—	no fix	2024-03-27	426 versions
CVE-2025-20149US	—	0.24% (15th)	—	no fix	2025-09-24	740 versions
CVE-2025-20311US	—	0.20% (10th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20181US	—	0.20% (10th)	—	no fix	2025-05-07	106 versions
CVE-2025-20293US	—	0.20% (10th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2026-20004US	—	0.19% (8th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2025-20313US	—	0.18% (8th)	—	no fix	2025-09-24	≤ vers:unknown/*

showing 50 of 55

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-805Buffer Access with Incorrect Length Value9 CVEs
CWE-248Uncaught Exception5 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-401Missing Release of Memory after Effective Lifetime3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-20Improper Input Validation2 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)35 CVEs
NLNCSC-NL (CSAF)24 CVEs
DECERT-Bund (BSI CSAF)10 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan