Skip to content
Fencer Intel

All · Cisco IOS

Newest first, late arrivals on top. Also a feed.

  1. 7.8
    CVE-2014-2112 The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) v…
    Cisco IOS
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  2. 7.1
    CVE-2014-2111 The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers…
    Cisco IOS
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  3. 7.8
    CVE-2014-2109 The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of s…
    Cisco IOS
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  4. 7.8
    CVE-2014-2108 Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to…
    Cisco IOS
    EPSS 2.2% chance of exploitation in 30 days, percentile 83%
  5. 7.1
    CVE-2014-2107 Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows rem…
    Cisco IOS
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  6. 7.8
    CVE-2014-2106 Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via…
    Cisco IOS
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  7. 7.1
    CVE-2014-2124 Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, allows remote attackers to caus…
    Cisco IOS
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  8. 5.4
    CVE-2013-6981 Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP pack…
    Cisco IOS
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  9. 5.4
    CVE-2013-6979 The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network config…
    Cisco IOS
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  10. 6.1
    CVE-2013-6705 The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and…
    Cisco IOS
  11. 7.1
    CVE-2013-6704 Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consump…
    Cisco IOS
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  12. 5.4
    CVE-2013-6706 The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via cra…
    Cisco IOS
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  13. 5.0
    CVE-2013-6700 The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process reload) via a request for an unspecified MIB,…
    Cisco IOS
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  14. 4.3
    CVE-2013-6694 The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service (MTU change and tunnel-session drop) via crafted…
    Cisco IOS
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  15. 5.4
    CVE-2013-6693 The MLDP implementation in Cisco IOS 15.3(3)S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause…
    Cisco IOS
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  16. 6.3
    CVE-2013-6692 Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated u…
    Cisco IOS
  17. 6.8
    CVE-2013-6686 The SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users to cause a denial of service (interface que…
    Cisco IOS
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  18. 6.4
    CVE-2013-5552 Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, wh…
    Cisco IOS
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  19. 4.3
    CVE-2013-5565 The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-…
    Cisco IOS
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  20. 7.8
    CVE-2013-5553 Multiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial of service (memory consumption or device…
    Cisco IOS
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  21. 4.3
    CVE-2013-5548 The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay featur…
    Cisco IOS
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  22. 7.8
    CVE-2013-5547 Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malforme…
    Cisco IOS
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  23. 7.8
    CVE-2013-5546 The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a d…
    Cisco IOS
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  24. 7.8
    CVE-2013-5545 The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (dev…
    Cisco IOS
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  25. 7.8
    CVE-2013-5543 Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reloa…
    Cisco IOS
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  26. 7.1
    CVE-2013-5549 Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor compone…
    Cisco IOS
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  27. 6.8
    CVE-2013-5522 Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a…
    Cisco IOS
  28. 5.7
    CVE-2013-5527 The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in…
    Cisco IOS
  29. 5.7
    CVE-2013-5499 The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload) by acquiring a le…
    Cisco IOS
  30. 7.8
    CVE-2013-5503 The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause…
    Cisco IOS
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%