Cisco 12.2(54)XO

Name: Cisco 12.2(54)XO
Brand: Cisco

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical12high10medium0low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-3881US	critical9.8OT critical	99.0% (100th)	KEV	no fix	2017-03-17	—
CVE-2017-12240US	critical9.8OT critical	13.8% (96th)	KEV	no fix	2017-09-29	—
CVE-2017-6738US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	—
CVE-2018-0172US	high8.6OT critical	7.82% (95th)	KEV	no fix	2018-03-28	—
CVE-2018-0174US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	—
CVE-2018-0173US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	—
CVE-2018-0175US	high8.0OT critical	3.48% (89th)	KEV	no fix	2018-03-28	—
CVE-2018-0167US	high8.8OT critical	3.35% (89th)	KEV	no fix	2018-03-28	—
CVE-2025-20363US	—	6.92% (94th)	—	no fix	2025-09-25	—
CVE-2018-15369US	medium6.8	2.06% (81st)	—	no fix	2018-10-05	—
CVE-2017-6770US	medium4.2	1.69% (77th)	—	no fix	2017-08-07	—
CVE-2020-3235US	high7.7	1.57% (75th)	—	no fix	2020-06-03	—
CVE-2021-34703US	medium6.5	1.19% (68th)	—	no fix	2021-09-23	—
CVE-2019-12665US	high7.4	1.09% (65th)	—	no fix	2019-09-25	—
CVE-2019-16009US	high8.8	0.97% (62nd)	—	no fix	2020-09-23	—
CVE-2018-0475US	high7.4	0.86% (58th)	—	no fix	2018-10-05	—
CVE-2025-20171US	—	0.78% (56th)	—	no fix	2025-02-05	—
CVE-2025-20170US	—	0.78% (56th)	—	no fix	2025-02-05	—
CVE-2025-20169US	—	0.78% (56th)	—	no fix	2025-02-05	—
CVE-2025-20175US	—	0.76% (55th)	—	no fix	2025-02-05	—
CVE-2025-20173US	—	0.76% (55th)	—	no fix	2025-02-05	—
CVE-2023-20081US	medium5.9	0.68% (52nd)	—	no fix	2023-03-23	—
CVE-2018-15373US	high7.4	0.66% (51st)	—	no fix	2018-10-05	—
CVE-2019-1746US	medium6.5	0.64% (50th)	—	no fix	2019-03-28	—
CVE-2019-1761US	medium4.3	0.63% (50th)	—	no fix	2019-03-28	—
CVE-2018-0197US	medium6.5	0.63% (50th)	—	no fix	2018-10-05	—
CVE-2025-20151US	—	0.41% (35th)	—	no fix	2025-05-07	—
CVE-2021-34714US	high7.4	0.39% (33rd)	—	no fix	2021-09-23	—
CVE-2020-3204US	medium6.7	0.38% (32nd)	—	no fix	2020-06-03	—
CVE-2020-3477US	medium5.5OT elevated	0.32% (25th)	—	no fix	2020-09-24	—
CVE-2020-3201US	medium6.0	0.31% (24th)	—	no fix	2020-06-03	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation15 CVEs
CWE-805Buffer Access with Incorrect Length Value5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-134Use of Externally-Controlled Format String2 CVEs
CWE-248Uncaught Exception2 CVEs
CWE-399CWE-3992 CVEs
CWE-665Improper Initialization2 CVEs

sources (1)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan