Cisco 15.8(3)M5
productUSA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
1critical10high10medium0low
updated 2026-10-28
01
vulnerabilities (44)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-20352US | —OT critical | KEV |
| CVE-2023-20109US | medium6.6OT critical | KEV |
| CVE-2025-20363US | — | — |
| CVE-2021-1385US | medium6.5 | — |
| CVE-2023-20076US | high8.8 | — |
| CVE-2021-1377US | medium5.8 | — |
| CVE-2022-20724US | medium5.3 | — |
| CVE-2021-34699US | high7.7 | — |
| CVE-2021-34703US | medium6.5 | — |
| CVE-2022-20726US | high7.5 | — |
| CVE-2022-20727US | medium6.7 | — |
| CVE-2021-1620US | high7.7 | — |
| CVE-2021-34705US | medium5.3 | — |
| CVE-2022-20920US | high7.7 | — |
| CVE-2023-20080US | high7.5 | — |
| CVE-2024-20308US | high7.5 | — |
| CVE-2024-20311US | high7.5 | — |
| CVE-2023-20186US | critical9.1 | — |
| CVE-2025-20171US | — | — |
| CVE-2025-20170US | — | — |
| CVE-2025-20169US | — | — |
| CVE-2025-20176US | — | — |
| CVE-2025-20175US | — | — |
| CVE-2025-20174US | — | — |
| CVE-2025-20173US | — | — |
| CVE-2025-20172US | — | — |
| CVE-2024-20307US | high7.5 | — |
| CVE-2025-20225US | — | — |
| CVE-2023-20081US | medium5.9 | — |
| CVE-2022-20725US | medium4.8 | — |
| CVE-2024-20433US | high7.5 | — |
| CVE-2025-20239US | — | — |
| CVE-2026-20301US | — | — |
| CVE-2025-20182US | — | — |
| CVE-2025-20154US | — | — |
| CVE-2024-20373US | — | — |
| CVE-2025-20253US | — | — |
| CVE-2025-20160US | — | — |
| CVE-2025-20151US | — | — |
| CVE-2022-20761US | medium6.5 | — |
| CVE-2026-20012US | — | — |
| CVE-2026-20125US | — | — |
| CVE-2024-20312US | — | — |
| CVE-2025-20149US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-805Buffer Access with Incorrect Length Value8 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
- CWE-248Uncaught Exception5 CVEs
- CWE-787Out-of-bounds Write5 CVEs
- CWE-121Stack-based Buffer Overflow4 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-401Missing Release of Memory after Effective Lifetime3 CVEs
- CWE-122Heap-based Buffer Overflow2 CVEs
03
sources (1)
Which sources assert this record, and when.
- USCisco PSIRT (CSAF)44 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan