Cisco
Page 38 of 69 — Cisco CVEs from a corpus of 6881, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-6358 | Medium | 5.9 | 2017-10-12 | Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptograp… |
CVE-2017-12270 | High | 7.5 | 2017-10-05 | A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticated, remote… |
CVE-2017-12269 | Medium | 5.4 | 2017-10-05 | A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) at… |
CVE-2017-12268 | Medium | 6.5 | 2017-10-05 | A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable multiple… |
CVE-2017-12267 | Medium | 5.3 | 2017-10-05 | A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthen… |
CVE-2017-12266 | Medium | 4.2 | 2017-10-05 | A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file wit… |
CVE-2017-12265 | Medium | 6.1 | 2017-10-05 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to co… |
CVE-2017-12264 | Medium | 5.3 | 2017-10-05 | A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… |
CVE-2017-12263 | High | 7.5 | 2017-10-05 | A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the ap… |
CVE-2017-12258 | Medium | 6.1 | 2017-10-05 | A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting… |
CVE-2017-12257 | Medium | 6.1 | 2017-10-05 | A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) att… |
CVE-2017-12256 | Medium | 6.5 | 2017-10-05 | A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to caus… |
CVE-2017-12246 | High | 8.6 | 2017-10-05 | A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated… |
CVE-2017-12245 | High | 8.6 | 2017-10-05 | A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion… |
CVE-2017-12244 | High | 8.6 | 2017-10-05 | A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause hi… |
CVE-2017-12240 | Critical | 9.8 | 2017-09-29 | The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker… |
CVE-2017-12239 | Medium | 6.8 | 2017-09-29 | A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers c… |
CVE-2017-12238 | Medium | 6.5 | 2017-09-29 | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenti… |
CVE-2017-12237 | High | 7.5 | 2017-09-29 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthent… |
CVE-2017-12236 | Critical | 9.8 | 2017-09-29 | A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote atta… |
CVE-2017-12235 | High | 7.5 | 2017-09-29 | A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthentica… |
CVE-2017-12234 | High | 7.5 | 2017-09-29 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, r… |
CVE-2017-12233 | High | 7.5 | 2017-09-29 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, r… |
CVE-2017-12232 | Medium | 6.5 | 2017-09-29 | A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 coul… |
CVE-2017-12231 | High | 7.5 | 2017-09-29 | A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote… |
CVE-2017-12230 | High | 8.8 | 2017-09-29 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an a… |
CVE-2017-12229 | Critical | 9.8 | 2017-09-29 | A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to by… |
CVE-2017-12228 | Medium | 5.9 | 2017-09-29 | A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated… |
CVE-2017-12226 | High | 8.8 | 2017-09-29 | A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engi… |
CVE-2017-12222 | Medium | 6.5 | 2017-09-29 | A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and resul… |
CVE-2011-4667 | Medium | 5.9 | 2017-09-25 | The encryption library in Cisco IOS Software 15.2(1)T, 15.2(1)T1, and 15.2(2)T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS 9000 18/4… |
CVE-2010-3050 | Medium | 6.5 | 2017-09-25 | Cisco IOS before 12.2(33)SXI allows remote authenticated users to cause a denial of service (device reboot). |
CVE-2010-3049 | Medium | 5.5 | 2017-09-25 | Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot). |
CVE-2017-6720 | Medium | 6.5 | 2017-09-21 | A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a… |
CVE-2017-12255 | Medium | 6.7 | 2017-09-21 | A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due to insuffi… |
CVE-2017-12254 | Medium | 6.1 | 2017-09-21 | A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (D… |
CVE-2017-12253 | High | 8.8 | 2017-09-21 | A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due… |
CVE-2017-12252 | High | 7.8 | 2017-09-21 | A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially caus… |
CVE-2017-12250 | Medium | 5.3 | 2017-09-21 | A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Appl… |
CVE-2017-12248 | Medium | 6.1 | 2017-09-21 | A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site… |
CVE-2017-12219 | High | 7.5 | 2017-09-21 | A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote… |
CVE-2017-12215 | High | 7.1 | 2017-09-21 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote… |
CVE-2017-12214 | High | 8.8 | 2017-09-21 | A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voice Portal… |
CVE-2015-0689 | High | 7.5 | 2017-09-19 | Cisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of HTTP meth… |
CVE-2017-9805 | High | 8.1 | 2017-09-15 | The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserializati… |
CVE-2017-12249 | Critical | 9.1 | 2017-09-13 | A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain u… |
CVE-2017-6796 | Medium | 6.7 | 2017-09-07 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local… |
CVE-2017-6795 | Medium | 4.4 | 2017-09-07 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local… |
CVE-2017-6794 | Medium | 6.7 | 2017-09-07 | A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate… |
CVE-2017-6793 | Medium | 6.5 | 2017-09-07 | A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensit… |
CVE-2017-6792 | Medium | 6.5 | 2017-09-07 | A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite sys… |
CVE-2017-6791 | High | 7.5 | 2017-09-07 | A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a deni… |
CVE-2017-6789 | Medium | 6.1 | 2017-09-07 | A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by… |
CVE-2017-6780 | High | 7.5 | 2017-09-07 | A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the syste… |
CVE-2017-6631 | High | 7.5 | 2017-09-07 | A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, re… |
CVE-2017-6627 | High | 7.5 | 2017-09-07 | A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to ca… |
CVE-2017-12227 | Medium | 5.4 | 2017-09-07 | A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection atta… |
CVE-2017-12225 | Medium | 6.5 | 2017-09-07 | A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's admi… |
CVE-2017-12224 | Medium | 6.5 | 2017-09-07 | A vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco Meeting Server could allow an authenticated, remote attacker to ente… |
CVE-2017-12223 | Medium | 6.4 | 2017-09-07 | A vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an u… |
CVE-2017-12221 | Medium | 5.4 | 2017-09-07 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… |
CVE-2017-12220 | Medium | 6.1 | 2017-09-07 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflect… |
CVE-2017-12218 | Medium | 5.8 | 2017-09-07 | A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Software for Cisco Email Security Appliances (… |
CVE-2017-12217 | Medium | 5.3 | 2017-09-07 | A vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler of Cisco ASR 5500 System Architecture Evolution (SAE) Gate… |
CVE-2017-12216 | High | 8.8 | 2017-09-07 | A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to informati… |
CVE-2017-12213 | Medium | 4.3 | 2017-09-07 | A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthe… |
CVE-2017-12212 | Medium | 6.1 | 2017-09-07 | A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS… |
CVE-2017-12211 | Medium | 5.3 | 2017-09-07 | A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker… |
CVE-2017-6790 | Medium | 6.8 | 2017-08-17 | A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote atta… |
CVE-2017-6788 | Medium | 6.1 | 2017-08-17 | The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker t… |
CVE-2017-6786 | Medium | 6.3 | 2017-08-17 | A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive information, including cred… |
CVE-2017-6785 | Medium | 4.3 | 2017-08-17 | A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to… |
CVE-2017-6784 | Medium | 5.3 | 2017-08-17 | A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to acce… |
CVE-2017-6783 | Medium | 4.3 | 2017-08-17 | A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) cou… |
CVE-2017-6782 | Medium | 5.4 | 2017-08-17 | A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web int… |
CVE-2017-6781 | Medium | 5.3 | 2017-08-17 | A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker… |
CVE-2017-6778 | Medium | 6.5 | 2017-08-17 | A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to ac… |
CVE-2017-6777 | Medium | 4.9 | 2017-08-17 | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire sensitive system in… |
CVE-2017-6776 | Medium | 6.1 | 2017-08-17 | A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct a cross-site scripti… |
CVE-2017-6775 | Medium | 5.7 | 2017-08-17 | A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local a… |
CVE-2017-6774 | Medium | 5.0 | 2017-08-17 | A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to… |
CVE-2017-6773 | Medium | 6.7 | 2017-08-17 | A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local a… |
CVE-2017-6772 | Medium | 4.3 | 2017-08-17 | A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information. The vulnerability is du… |
CVE-2017-6771 | High | 7.5 | 2017-08-17 | A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive infor… |
CVE-2017-6768 | High | 7.8 | 2017-08-17 | A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller (APIC)… |
CVE-2017-6767 | High | 7.1 | 2017-08-17 | A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher privileges than the a… |
CVE-2017-6710 | High | 8.1 | 2017-08-17 | A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate privileges and run command… |
CVE-2017-6770 | Medium | 4.2 | 2017-08-07 | Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected… |
CVE-2017-6769 | Medium | 5.4 | 2017-08-07 | A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct… |
CVE-2017-6766 | High | 7.5 | 2017-08-07 | A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1… |
CVE-2017-6765 | Medium | 6.1 | 2017-08-07 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unauthenticated, remote… |
CVE-2017-6764 | Medium | 5.4 | 2017-08-07 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1) could allow an authenticated, remote attacker to conduc… |
CVE-2017-6763 | High | 7.5 | 2017-08-07 | A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthenticated, remote attacker to cause a deni… |
CVE-2017-6762 | Medium | 6.1 | 2017-08-07 | A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacke… |
CVE-2017-6761 | Medium | 6.1 | 2017-08-07 | A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-s… |
CVE-2017-6759 | Medium | 6.5 | 2017-08-07 | A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary… |
CVE-2017-6758 | Medium | 6.5 | 2017-08-07 | A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary… |
CVE-2017-6757 | High | 8.8 | 2017-08-07 | A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, remote attacker to… |
CVE-2017-6756 | High | 8.8 | 2017-08-07 | A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to ex… |
CVE-2017-6754 | Medium | 6.5 | 2017-08-07 | A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated… |