Cisco Cisco 3000 Series Industrial Security Appliances (ISA)

Name: Cisco Cisco 3000 Series Industrial Security Appliances (ISA)
Brand: Cisco

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high8medium0low

updated 2026-10-28

vulnerabilities (51)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20358US	medium6.7	0.70% (53rd)	—	no fix	2024-04-24	≤ vers:unknown/*
CVE-2019-1649US	medium6.7	0.61% (49th)	—	no fix	2019-05-13	—
CVE-2024-20340US	medium6.5	0.45% (39th)	—	no fix	2024-10-23	≤ vers:unknown/*
CVE-2026-20018US	—	0.45% (39th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20052US	—	0.44% (38th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20031US	—	0.44% (38th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20082US	—	0.43% (37th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20073US	—	0.40% (35th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20009US	—	0.40% (35th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20050US	—	0.40% (34th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20006US	—	0.40% (34th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20039US	—	0.37% (31st)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20101US	—OT elevated	0.37% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20103US	—	0.36% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20002US	—	0.36% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20086US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20084US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20012US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20114US	—	0.35% (29th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20016US	medium6.7	0.35% (28th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20001US	—	0.34% (28th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20106US	—	0.34% (27th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20105US	—	0.33% (26th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20015US	—	0.32% (25th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20013US	—	0.32% (25th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20049US	—	0.30% (23rd)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20014US	—	0.30% (23rd)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20100US	—	0.30% (23rd)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20003US	—	0.30% (22nd)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20125US	—	0.29% (22nd)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20069US	—	0.29% (21st)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20102US	—	0.28% (20th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20070US	—	0.28% (20th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20020US	medium5.7	0.25% (16th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20007US	—	0.25% (16th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20021US	—	0.20% (10th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20063US	—	0.20% (10th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20022US	medium6.5	0.19% (9th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20004US	—	0.19% (8th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20024US	medium5.7	0.19% (8th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20017US	—	0.17% (6th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20025US	—	0.16% (5th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20104US	—	0.16% (5th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20115US	—OT elevated	0.16% (5th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20023US	medium6.5	0.15% (4th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20044US	—	0.15% (4th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20008US	—	0.14% (3rd)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20110US	—	0.13% (3rd)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20062US	—	0.13% (2nd)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20064US	—	0.10% (1st)	—	no fix	2026-03-04	≤ vers:unknown/*

showing 50 of 51

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime7 CVEs
CWE-250Execution with Unnecessary Privileges4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)50 CVEs
USCisco PSIRT (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan