Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco IOS XE Software — Vulnerabilities & Security Advisories 224

All 224 CVE vulnerabilities found in Cisco IOS XE Software, with AI-generated Chinese analysis, references, and POCs.

This page catalogs known Common Weakness Enumerations (CWE) affecting the Cisco IOS XE Software platform. It aggregates a comprehensive list of security vulnerabilities, ranging from buffer overflows and injection flaws to authentication bypasses and cross-site scripting issues. The data covers historical records spanning from the early 2000s up to the most recently disclosed findings, ensuring a broad temporal scope for analysis. Users can utilize this resource to track Cisco’s security advisories chronologically, gaining insight into how specific weakness classes have impacted this operating system over time. The page facilitates a deeper understanding of the product’s vulnerability history by correlating technical details with official vendor responses and patch availability. By organizing these findings under relevant weakness types, the content helps security professionals assess the risk landscape associated with Cisco IOS XE deployments. Readers can explore detailed descriptions of each flaw to comprehend the underlying causes and potential exploitation scenarios. This structured approach allows for efficient investigation into past incidents, aiding in the formulation of more robust security policies and mitigation strategies. The aggregated information serves as a centralized reference point for auditing, compliance reviews, and threat intelligence gathering, enabling teams to identify patterns in vendor patching behavior and software resilience. Ultimately, this page provides a factual, non-promotional record of security shortcomings to support informed decision-making in network infrastructure management.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2021-1435 Cisco IOS XE Software Web UI Command Injection Vulnerability CWE-22 8.8 -2021-03-24
CVE-2021-1434 Cisco IOS XE SD-WAN Software Arbitrary File Corruption Vulnerability CWE-552 4.4 Medium2021-03-24
CVE-2021-1433 Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability CWE-119 8.1 High2021-03-24
CVE-2021-1432 Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability CWE-20 7.3 High2021-03-24
CVE-2021-1431 Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability CWE-20 7.5 High2021-03-24
CVE-2020-3359 Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability CWE-20 8.6 -2020-09-24
CVE-2020-3390 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability CWE-20 7.4 -2020-09-24
CVE-2020-3393 Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability CWE-269 6.0 Medium2020-09-24
CVE-2020-3396 Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability CWE-284 6.8 Medium2020-09-24
CVE-2020-3399 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability CWE-126 8.6 High2020-09-24
CVE-2020-3400 Cisco IOS XE Software Web UI Authorization Bypass Vulnerability CWE-862 8.8 -2020-09-24
CVE-2020-3403 Cisco IOS XE Software Command Injection Vulnerability CWE-78 7.8 -2020-09-24
CVE-2020-3404 Cisco IOS XE Software Consent Token Bypass Vulnerability CWE-863 7.8 -2020-09-24
CVE-2020-3407 Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability CWE-476 8.6 -2020-09-24
CVE-2020-3416 Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities CWE-749 6.7 Medium2020-09-24
CVE-2020-3417 Cisco IOS XE Software Arbitrary Code Execution Vulnerability CWE-78 6.8 Medium2020-09-24
CVE-2020-3418 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability CWE-284 4.7 -2020-09-24
CVE-2020-3421 Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities CWE-754 8.6 High2020-09-24
CVE-2020-3422 Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability CWE-371 8.6 -2020-09-24
CVE-2020-3428 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WLAN Local Profiling Denial of Service Vulnerability CWE-20 6.5 -2020-09-24
CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability CWE-20 6.5 -2020-09-24
CVE-2020-3476 Cisco IOS XE Software Arbitrary File Overwrite Vulnerability CWE-552 6.0 -2020-09-24
CVE-2020-3480 Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities CWE-754 8.6 High2020-09-24
CVE-2020-3486 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities CWE-20 7.4 -2020-09-24
CVE-2020-3487 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities CWE-20 7.4 -2020-09-24
CVE-2020-3488 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities CWE-20 7.4 -2020-09-24
CVE-2020-3489 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities CWE-20 7.4 -2020-09-24
CVE-2020-3493 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities CWE-20 7.4 -2020-09-24
CVE-2020-3494 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities CWE-20 7.4 -2020-09-24
CVE-2020-3497 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities CWE-20 7.4 -2020-09-24

All 224 known CVE vulnerabilities affecting Cisco IOS XE Software with full Chinese analysis, references, and POCs where available.