Cisco 3.13.2S
productUSA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
3critical48high31medium0low
updated 2026-10-30
01
vulnerabilities (108)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2017-6742US | high8.8OT critical | KEV | ||||
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could… | ||||||
| CVE-2018-0172US | high8.6OT critical | KEV | ||||
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affect… | ||||||
| CVE-2018-0173US | high8.6OT critical | KEV | ||||
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unau… | ||||||
| CVE-2017-12237US | high7.5OT critical | KEV | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attack… | ||||||
| CVE-2017-12319US | medium5.9OT critical | KEV | ||||
A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to ca… | ||||||
| CVE-2018-0175US | high8.0OT critical | KEV | ||||
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthentic… | ||||||
| CVE-2018-0167US | high8.8OT critical | KEV | ||||
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow a… | ||||||
| CVE-2023-20109US | medium6.6OT critical | KEV | ||||
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has a… | ||||||
| CVE-2020-10188US | critical9.8 | — | ||||
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the net… | ||||||
| CVE-2018-0472US | high8.6 | — | ||||
A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticate… | ||||||
| CVE-2025-20363US | — | — | ||||
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Ci… | ||||||
| CVE-2017-6741US | high8.8 | — | ||||
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could… | ||||||
| CVE-2019-12643US | critical10.0 | — | ||||
A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Ci… | ||||||
| CVE-2018-0485US | high8.6 | — | ||||
A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow an… | ||||||
| CVE-2018-0467US | high8.6 | — | ||||
A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due… | ||||||
| CVE-2019-1737US | high8.6 | — | ||||
A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cau… | ||||||
| CVE-2017-3857US | high7.5 | — | ||||
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an… | ||||||
| CVE-2019-1752US | high7.5 | — | ||||
A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerabili… | ||||||
| CVE-2017-3850US | medium5.9 | — | ||||
A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow… | ||||||
| CVE-2017-3856US | high7.5 | — | ||||
A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability… | ||||||
| CVE-2018-15369US | medium6.8 | — | ||||
A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reloa… | ||||||
| CVE-2018-0282US | medium6.8 | — | ||||
A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is… | ||||||
| CVE-2019-12654US | high7.5 | — | ||||
A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an a… | ||||||
| CVE-2019-12647US | high7.5 | — | ||||
A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerabil… | ||||||
| CVE-2019-12646US | high7.5 | — | ||||
A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated,… | ||||||
| CVE-2020-3228US | high8.6 | — | ||||
A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker… | ||||||
| CVE-2019-12669US | high7.5 | — | ||||
A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause… | ||||||
| CVE-2020-3200US | high7.7 | — | ||||
A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to r… | ||||||
| CVE-2020-3230US | high7.5 | — | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pre… | ||||||
| CVE-2017-6770US | medium4.2 | — | ||||
Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability i… | ||||||
| CVE-2020-3226US | high8.6 | — | ||||
A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload… | ||||||
| CVE-2021-1446US | high7.5 | — | ||||
A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote a… | ||||||
| CVE-2021-1624US | high8.6 | — | ||||
A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilizatio… | ||||||
| CVE-2021-1616US | medium4.7 | — | ||||
A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote a… | ||||||
| CVE-2021-34699US | high7.7 | — | ||||
A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerab… | ||||||
| CVE-2021-34703US | medium6.5 | — | ||||
A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affecte… | ||||||
| CVE-2019-1748US | high7.4 | — | ||||
A vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized… | ||||||
| CVE-2022-20694US | medium6.8 | — | ||||
A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the… | ||||||
| CVE-2020-3217US | high8.8 | — | ||||
A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software co… | ||||||
| CVE-2019-12665US | high7.4 | — | ||||
A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to read and modify data that should normally have been s… | ||||||
| CVE-2021-1620US | high7.7 | — | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, r… | ||||||
| CVE-2021-34705US | medium5.3 | — | ||||
A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass con… | ||||||
| CVE-2017-12228US | medium5.9 | — | ||||
A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated, remote attacker to g… | ||||||
| CVE-2023-20027US | high8.6 | — | ||||
A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a… | ||||||
| CVE-2019-16009US | high8.8 | — | ||||
A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an aff… | ||||||
| CVE-2022-20678US | high7.5 | — | ||||
A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of se… | ||||||
| CVE-2022-20920US | high7.7 | — | ||||
A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This… | ||||||
| CVE-2018-0466US | medium6.5 | — | ||||
A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an aff… | ||||||
| CVE-2023-20080US | high7.5 | — | ||||
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial o… | ||||||
| CVE-2023-20187US | high7.5 | — | ||||
A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthentica… | ||||||
showing 50 of 108
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation27 CVEs
- CWE-805Buffer Access with Incorrect Length Value9 CVEs
- CWE-399CWE-3998 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
- CWE-264CWE-2645 CVEs
- CWE-78Improper Neutralization of Special Elements used in an OS Command5 CVEs
- CWE-787Out-of-bounds Write5 CVEs
- CWE-248Uncaught Exception4 CVEs
03
sources (1)
Which sources assert this record, and when.
- USCisco PSIRT (CSAF)108 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan