cisco ios xe sd-wan

Name: cisco ios xe sd-wan
Brand: cisco

productUS

cpe:2.3:o:cisco:ios_xe_sd-wan:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical10high8medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	no fix	2025-09-24	21 versions
CVE-2020-3375US	critical9.8	3.90% (90th)	—	no fix	2020-07-31	3 versions
CVE-2021-34727US	critical9.8	2.63% (85th)	—	no fix	2021-09-23	—
CVE-2021-1300US	critical9.8	2.16% (82nd)	—	no fix	2021-01-20	—
CVE-2021-1301US	critical9.8	2.13% (82nd)	—	no fix	2021-01-20	—
CVE-2021-1274US	high8.6	1.92% (80th)	—	no fix	2021-01-20	—
CVE-2021-1273US	high8.6	1.90% (80th)	—	no fix	2021-01-20	—
CVE-2021-1619US	critical9.1	1.76% (78th)	—	no fix	2021-09-23	—
CVE-2021-1278US	high7.5	1.68% (77th)	—	no fix	2021-01-20	—
CVE-2021-1279US	high8.6	1.40% (72nd)	—	no fix	2021-01-20	—
CVE-2021-1241US	high7.5	1.40% (72nd)	—	no fix	2021-01-20	—
CVE-2021-1305US	medium4.3OT elevated	1.31% (71st)	—	no fix	2021-01-20	—
CVE-2024-20455US	high8.6	0.66% (51st)	—	no fix	2024-09-25	14 versions
CVE-2021-1383US	medium6.7	0.59% (48th)	—	no fix	2021-03-24	—
CVE-2024-20373US	—	0.50% (43rd)	—	no fix	2024-11-15	20 versions
CVE-2020-3216US	medium6.8	0.43% (38th)	—	no fix	2020-06-03	7 versions
CVE-2025-20151US	—	0.41% (35th)	—	no fix	2025-05-07	30 versions
CVE-2021-34729US	medium6.7	0.36% (29th)	—	no fix	2021-09-23	≤ 17.3.1a
CVE-2021-34725US	medium6.7	0.36% (29th)	—	no fix	2021-09-23	≤ 17.2.1r
CVE-2021-1432US	high7.3	0.35% (29th)	—	no fix	2021-03-24	—
CVE-2021-1529US	high7.8	0.31% (23rd)	—	no fix	2021-10-21	≥ 17.2.1r
CVE-2021-1454US	medium6.7	0.29% (21st)	—	no fix	2021-03-24	—
CVE-2021-34724US	medium6.0	0.27% (18th)	—	no fix	2021-09-23	≤ 17.3.1a
CVE-2021-1371US	medium6.6	0.26% (18th)	—	no fix	2021-03-24	= 17.2.0
CVE-2023-20035US	high7.8	0.22% (13th)	—	no fix	2023-03-23	—
CVE-2022-20850US	high7.1	0.21% (11th)	—	16.10.1	2022-09-30	< 16.10.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer8 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan