Browse all 3365 CVE security advisories affecting Cisco. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Cisco Systems operates as a global leader in networking hardware, software, and telecommunications services, providing critical infrastructure for enterprise connectivity and cloud security. With over 3,000 recorded CVEs, the company’s attack surface is extensive, reflecting the complexity of its diverse product portfolio. Historically, vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from legacy protocols or complex configuration interfaces. Notable incidents include the 2023 supply chain compromise affecting the Cisco AnyConnect Secure Mobility Client, which allowed attackers to bypass authentication mechanisms. These breaches highlight risks associated with widely deployed endpoint security agents. The sheer volume of disclosed issues underscores the challenges inherent in maintaining security across such a vast ecosystem of interconnected devices and software solutions, requiring rigorous patch management and continuous monitoring to mitigate potential exploitation by threat actors targeting critical network infrastructure.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-20400 | Cisco Expressway Series 安全漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-601 | 4.7 | Medium | 2024-07-17 |
| CVE-2024-20429 | Cisco Secure Email 安全漏洞 — Cisco Secure Email CWE-74 | 6.5 | Medium | 2024-07-17 |
| CVE-2024-20416 | Cisco RV340 和 Cisco RV345 安全漏洞 — Cisco Small Business RV Series Router Firmware CWE-130 | 6.5 | Medium | 2024-07-17 |
| CVE-2024-20323 | Cisco Intelligent Node 安全漏洞 — Cisco Intelligent Node Manager CWE-321 | 7.5 | High | 2024-07-17 |
| CVE-2024-20296 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software CWE-434 | 4.7 | Medium | 2024-07-17 |
| CVE-2024-20435 | Cisco AsyncOS 安全漏洞 — Cisco Secure Web Appliance CWE-250 | 8.8 | High | 2024-07-17 |
| CVE-2024-20419 | Cisco Smart Software Manager On-Prem 安全漏洞 — Cisco Smart Software Manager On-Prem CWE-620 | 10.0 | Critical | 2024-07-17 |
| CVE-2024-20401 | Cisco Secure Email 安全漏洞 — Cisco Secure Email CWE-36 | 9.8 | Critical | 2024-07-17 |
| CVE-2024-20456 | Cisco IOS XR 安全漏洞 — Cisco IOS XR Software CWE-732 | 6.7 | Medium | 2024-07-10 |
| CVE-2024-20399 | Cisco NX-OS Software CLI Command Injection Vulnerability — Cisco NX-OS Software CWE-78 | 6.0 | Medium | 2024-07-01 |
| CVE-2024-20405 | Cisco Finesse 安全漏洞 — Cisco Unified Contact Center Enterprise CWE-20 | 4.8 | Medium | 2024-06-05 |
| CVE-2024-20404 | Cisco Finesse 代码问题漏洞 — Cisco Unified Contact Center Enterprise CWE-918 | 7.2 | High | 2024-06-05 |
| CVE-2024-20360 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center CWE-89 | 8.8 | High | 2024-05-22 |
| CVE-2024-20293 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-436 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-20355 | Cisco 多款产品安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-862 | 5.0 | Medium | 2024-05-22 |
| CVE-2024-20361 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center CWE-264 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-20261 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-284 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-20363 | Cisco 多款产品安全漏洞 — Cisco Firepower Threat Defense Software CWE-290 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-20389 | Cisco Crosswork Network Services Orchestrator 安全漏洞 — Cisco ConfD CWE-266 | 7.8 | High | 2024-05-16 |
| CVE-2024-20326 | Cisco Crosswork Network Services Orchestrator 安全漏洞 — Cisco ConfD CWE-78 | 7.8 | High | 2024-05-16 |
| CVE-2024-20383 | Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability — Cisco Secure Email and Web Manager CWE-79 | 4.8 | Medium | 2024-05-15 |
| CVE-2024-20257 | Cisco AsyncOS 安全漏洞 — Cisco Secure Email CWE-79 | 4.8 | Medium | 2024-05-15 |
| CVE-2024-20256 | Cisco AsyncOS 安全漏洞 — Cisco Secure Web Appliance CWE-79 | 4.8 | Medium | 2024-05-15 |
| CVE-2024-20258 | Cisco AsyncOS 安全漏洞 — Cisco Secure Email CWE-79 | 6.1 | Medium | 2024-05-15 |
| CVE-2024-20366 | Cisco Crosswork Network Services Orchestrator 安全漏洞 — Cisco Network Services Orchestrator CWE-73 | 7.8 | High | 2024-05-15 |
| CVE-2024-20391 | Cisco Secure Client 安全漏洞 — Cisco Secure Client CWE-306 | 6.8 | Medium | 2024-05-15 |
| CVE-2024-20369 | Cisco Crosswork Network Services Orchestrator 安全漏洞 — Cisco Network Services Orchestrator CWE-601 | 4.7 | Medium | 2024-05-15 |
| CVE-2024-20392 | Cisco AsyncOS 安全漏洞 — Cisco Secure Email CWE-113 | 6.1 | Medium | 2024-05-15 |
| CVE-2024-20394 | Cisco AppDynamics Network Visibility Agent 安全漏洞 — Cisco AppDynamics CWE-20 | 5.5 | Medium | 2024-05-15 |
| CVE-2024-20376 | Cisco IP Phone 安全漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-787 | 7.5 | High | 2024-05-01 |
This page lists every published CVE security advisory associated with Cisco. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.