cisco ios

Name: cisco ios
Brand: cisco

productUS

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical343high235medium12low

updated 2026-10-27

vulnerabilities (617)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-0171US	critical9.8OT critical	99.5% (100th)	KEV	no fix	2018-03-28	= 15.2(5)e
CVE-2017-3881US	critical9.8OT critical	99.0% (100th)	KEV	no fix	2017-03-17	12.2s → 15.1\(3\)svs
CVE-2016-6415US	high7.5OT critical	87.7% (100th)	KEV	no fix	2016-09-19	2 versions
CVE-2017-6736US	high8.8OT critical	70.4% (99th)	KEV	no fix	2017-07-17	2 versions
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	no fix	2025-09-24	726 versions
CVE-2008-4128US	high9.3OT critical	33.9% (98th)	KEV	no fix	2008-09-18	= 12.4
CVE-2017-6742US	high8.8OT critical	21.4% (98th)	KEV	no fix	2017-07-17	2 versions
CVE-2017-6737US	high8.8OT critical	45.2% (99th)	KEV	no fix	2017-07-17	2 versions
CVE-2017-12240US	critical9.8OT critical	13.8% (96th)	KEV	no fix	2017-09-29	12.2 → 15.6
CVE-2017-6740US	high8.8OT critical	11.1% (96th)	KEV	no fix	2017-07-17	2 versions
CVE-2017-6743US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	2 versions
CVE-2017-6739US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	2 versions
CVE-2017-6738US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	2 versions
CVE-2018-0156US	high7.5OT critical	9.36% (95th)	KEV	no fix	2018-03-28	2 versions
CVE-2018-0172US	high8.6OT critical	7.82% (95th)	KEV	no fix	2018-03-28	—
CVE-2018-0155US	high8.6OT critical	7.74% (95th)	KEV	no fix	2018-03-28	= 3.6(2)e
CVE-2018-0174US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	3 versions
CVE-2018-0173US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	3 versions
CVE-2017-6744US	high8.8OT critical	7.29% (94th)	KEV	no fix	2017-07-17	347 versions
CVE-2018-0158US	high8.6OT critical	7.19% (94th)	KEV	no fix	2018-03-28	10 versions
CVE-2018-0154US	high7.5OT critical	7.07% (94th)	KEV	no fix	2018-03-28	—
CVE-2017-12237US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	15.0 → 15.6
CVE-2017-12235US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.2 → 15.6
CVE-2017-12234US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.4 → 15.6
CVE-2017-12233US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.4 → 15.6
CVE-2017-12231US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	12.4 → 15.6
CVE-2018-0159US	high7.5OT critical	6.87% (94th)	KEV	no fix	2018-03-28	= 15.3(3)s
CVE-2017-6627US	high7.5OT critical	6.16% (93rd)	KEV	no fix	2017-09-07	35 versions
CVE-2017-12319US	medium5.9OT critical	5.24% (92nd)	KEV	no fix	2018-03-27	= 15.4(1)s
CVE-2018-0180US	medium5.9OT critical	4.93% (92nd)	KEV	no fix	2018-03-28	7 versions
CVE-2018-0179US	medium5.9OT critical	4.93% (92nd)	KEV	no fix	2018-03-28	7 versions
CVE-2004-1464US	medium5.9OT critical	4.84% (92nd)	KEV	no fix	2004-12-31	≤ 12.2\(15\)zj3
CVE-2018-0161US	medium6.3OT critical	4.12% (91st)	KEV	no fix	2018-03-28	= 15.2(5)e
CVE-2018-0175US	high8.0OT critical	3.48% (89th)	KEV	no fix	2018-03-28	4 versions
CVE-2018-0167US	high8.8OT critical	3.35% (89th)	KEV	no fix	2018-03-28	4 versions
CVE-2023-20109US	medium6.6OT critical	2.48% (84th)	KEV	no fix	2023-09-27	674 versions
CVE-2017-12232US	medium6.5OT critical	2.15% (82nd)	KEV	no fix	2017-09-29	15.0 → 15.6
CVE-2017-6663US	medium6.5OT critical	2.12% (82nd)	KEV	no fix	2017-08-07	117 versions
CVE-2017-12238US	medium6.5OT critical	2.02% (81st)	KEV	no fix	2017-09-29	15.0 → 15.4
CVE-1999-0016US	medium5.0	96.4% (100th)	Exploit	no fix	1997-12-01	= 7000
CVE-2002-1359US	high10.0	80.2% (100th)	Exploit	no fix	2002-12-23	8 versions
CVE-2001-0537US	high9.3	68.5% (99th)	Exploit	no fix	2001-07-21	91 versions
CVE-2000-0380US	high7.1	35.0% (98th)	Exploit	no fix	2000-04-26	39 versions
CVE-1999-0524US	low2.1	32.2% (98th)	Exploit	no fix	1997-08-01	—
CVE-2008-4609US	high7.1	32.1% (98th)	Exploit	no fix	2008-10-20	1458 versions
CVE-2014-7992US	medium5.0	27.2% (98th)	Exploit	no fix	2014-11-18	—
CVE-2007-4286US	high9.3	19.4% (97th)	Exploit	no fix	2007-08-09	5 versions
CVE-2003-0567US	high7.8	16.6% (97th)	Exploit	no fix	2003-08-18	169 versions
CVE-2007-5381US	high9.3	14.7% (97th)	Exploit	no fix	2007-10-12	1429 versions
CVE-2007-2586US	high9.3OT high	14.4% (97th)	Exploit	no fix	2007-05-10	380 versions

showing 50 of 617

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation211 CVEs
CWE-399CWE-399136 CVEs
CWE-400Uncontrolled Resource Consumption106 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer48 CVEs
CWE-264CWE-26430 CVEs
CWE-284Improper Access Control25 CVEs
CWE-287Improper Authentication24 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor20 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE617 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan