Cisco MDS 9000

productDE

cpe:/o:cisco:mds_9000:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical12high6medium0low

updated 2026-10-26

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	—
CVE-2018-5391US	high7.5	32.4% (98th)	Exploit	no fix	2018-09-06	—
CVE-2016-6304US	high7.5	63.0% (99th)	—	no fix	2016-09-26	—
CVE-2016-2177US	critical9.8	44.5% (99th)	—	no fix	2016-06-20	—
CVE-2016-2182US	critical9.8	44.2% (99th)	—	no fix	2016-09-16	—
CVE-2016-6306US	medium5.9	41.7% (99th)	—	no fix	2016-09-26	—
CVE-2016-6303US	critical9.8	32.0% (98th)	—	no fix	2016-09-16	—
CVE-2016-2180US	high7.5	30.0% (98th)	—	no fix	2016-08-01	—
CVE-2016-6302US	high7.5	27.8% (98th)	—	no fix	2016-09-16	—
CVE-2016-2179US	high7.5	26.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-2181US	high7.5	22.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-6305US	high7.5	16.0% (97th)	—	no fix	2016-09-26	—
CVE-2016-6307US	medium5.9	13.8% (96th)	—	no fix	2016-09-26	—
CVE-2016-6308US	medium5.9	12.2% (96th)	—	no fix	2016-09-26	—
CVE-2016-2178US	medium5.5	1.24% (69th)	—	no fix	2016-06-20	—
CVE-2024-20446US	—	0.78% (56th)	—	no fix	2024-08-28	—
CVE-2024-20294US	medium6.6	0.32% (24th)	—	no fix	2024-02-29	—
CVE-2023-20050US	high7.8	0.25% (16th)	—	no fix	2023-02-23	—
CVE-2023-20168US	medium6.5	0.24% (15th)	—	no fix	2023-08-23	—
CVE-2024-20289US	—	0.23% (13th)	—	no fix	2024-08-28	—
CVE-2024-20286US	high8.8	0.19% (9th)	—	no fix	2024-08-28	—
CVE-2024-20285US	high8.8	0.19% (9th)	—	no fix	2024-08-28	—
CVE-2024-20284US	high8.8	0.19% (9th)	—	no fix	2024-08-28	—
CVE-2024-20411US	—	0.16% (5th)	—	no fix	2024-08-28	—
CVE-2024-20413US	—OT elevated	0.15% (4th)	—	no fix	2024-08-28	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-399CWE-3993 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.