Cisco IOS XE Catalyst SD-WAN 16.12.1b when installed on Cisco Cloud Services Router 1000V Series

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical5high3medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	no fix	2025-09-24	—
CVE-2021-34727US	critical9.8	2.63% (85th)	—	no fix	2021-09-23	—
CVE-2021-1274US	high8.6	1.92% (80th)	—	no fix	2021-01-20	—
CVE-2021-1619US	critical9.1	1.76% (78th)	—	no fix	2021-09-23	—
CVE-2021-1278US	high7.5	1.68% (77th)	—	no fix	2021-01-20	—
CVE-2021-1625US	medium5.8	0.91% (60th)	—	no fix	2021-09-23	—
CVE-2025-20151US	—	0.41% (35th)	—	no fix	2025-05-07	—
CVE-2021-34725US	medium6.7	0.36% (29th)	—	no fix	2021-09-23	—
CVE-2021-1529US	high7.8	0.31% (23rd)	—	no fix	2021-10-21	—
CVE-2021-1371US	medium6.6	0.26% (18th)	—	no fix	2021-03-24	—
CVE-2021-1612US	high7.1	0.25% (16th)	—	no fix	2021-09-23	—
CVE-2023-20035US	high7.8	0.22% (13th)	—	no fix	2023-03-23	—

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
CWE-146Improper Neutralization of Expression/Command Delimiters1 CVEs
CWE-16CWE-161 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.