Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Cisco — Vulnerabilities & Security Advisories 3365

Browse all 3365 CVE security advisories affecting Cisco. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cisco Systems operates as a global leader in networking hardware, software, and telecommunications services, providing critical infrastructure for enterprise connectivity and cloud security. With over 3,000 recorded CVEs, the company’s attack surface is extensive, reflecting the complexity of its diverse product portfolio. Historically, vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from legacy protocols or complex configuration interfaces. Notable incidents include the 2023 supply chain compromise affecting the Cisco AnyConnect Secure Mobility Client, which allowed attackers to bypass authentication mechanisms. These breaches highlight risks associated with widely deployed endpoint security agents. The sheer volume of disclosed issues underscores the challenges inherent in maintaining security across such a vast ecosystem of interconnected devices and software solutions, requiring rigorous patch management and continuous monitoring to mitigate potential exploitation by threat actors targeting critical network infrastructure.

Top products by Cisco: Cisco Small Business RV Series Router Firmware Cisco IOS XE Software Cisco Identity Services Engine Software Cisco Adaptive Security Appliance (ASA) Software Cisco Firepower Management Center Cisco IOS XR Software Cisco Firepower Threat Defense Software Cisco NX-OS Software Cisco Data Center Network Manager Cisco SD-WAN vManage Cisco SD-WAN Solution Cisco Webex Meetings Cisco Unified Communications Manager Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco Prime Infrastructure Cisco Enterprise NFV Infrastructure Software IOS Cisco IOS Cisco Catalyst SD-WAN Manager Cisco WebEx WRF Player Cisco Digital Network Architecture Center (DNA Center) Cisco Email Security Appliance (ESA) Cisco Aironet Access Point Software Cisco RoomOS Software Cisco Unified Contact Center Express Cisco Unified Computing System (Managed) Cisco Secure Email Cisco Nexus Dashboard Cisco Application Policy Infrastructure Controller (APIC) Cisco Unity Connection
CVE ID Title CVSS Severity Published
CVE-2021-34787 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-183 5.3 Medium 2021-10-27
CVE-2021-34783 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-119 8.6 High 2021-10-27
CVE-2021-34781 Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-119 8.6 High 2021-10-27
CVE-2021-34764 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities — Cisco Firepower Management Center CWE-601 4.8 Medium 2021-10-27
CVE-2021-34763 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities — Cisco Firepower Management Center CWE-601 4.8 Medium 2021-10-27
CVE-2021-34762 Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability — Cisco Firepower Management Center CWE-26 8.1 High 2021-10-27
CVE-2021-34761 Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability — Cisco Firepower Threat Defense Software CWE-73 4.4 Medium 2021-10-27
CVE-2021-34756 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities — Cisco Firepower Threat Defense Software CWE-20 6.7 Medium 2021-10-27
CVE-2021-34755 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities — Cisco Firepower Threat Defense Software CWE-20 6.7 Medium 2021-10-27
CVE-2021-34754 Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities — Cisco Firepower Threat Defense Software CWE-284 5.8 Medium 2021-10-27
CVE-2021-40125 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-416 5.3 Medium 2021-10-27
CVE-2021-34736 Cisco Integrated Management Controller GUI Denial of Service Vulnerability — Cisco Unified Computing System (Managed) CWE-20 5.3 Medium 2021-10-21
CVE-2021-40123 Cisco Identity Services Engine File Download Vulnerability — Cisco Identity Services Engine Software CWE-266 4.3 Medium 2021-10-21
CVE-2021-40122 Cisco Meeting Server Call Bridge Denial of Service Vulnerability — Cisco Meeting Server CWE-399 5.9 Medium 2021-10-21
CVE-2021-40121 Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities — Cisco Identity Services Engine Software CWE-79 6.1 Medium 2021-10-21
CVE-2021-34789 Cisco Tetration Stored Cross-Site Scripting Vulnerability — Cisco Secure Workload CWE-79 4.8 Medium 2021-10-21
CVE-2021-34760 Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability — Cisco TelePresence Management Suite (TMS) CWE-79 5.4 - 2021-10-21
CVE-2021-34743 Cisco Webex Software Application Authorization Bypass Vulnerability — Cisco Webex Meetings CWE-352 4.3 Medium 2021-10-21
CVE-2021-34738 Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities — Cisco Identity Services Engine Software CWE-79 6.1 Medium 2021-10-21
CVE-2021-1529 Cisco IOS XE SD-WAN Software Command Injection Vulnerability — Cisco IOS XE SD-WAN Software CWE-78 7.8 High 2021-10-21
CVE-2021-1594 Cisco Identity Services Engine Privilege Escalation Vulnerability — Cisco Identity Services Engine Software CWE-266 7.5 High 2021-10-06
CVE-2021-34698 Cisco Web Security Appliance Proxy Service Denial of Service Vulnerability — Cisco Web Security Appliance (WSA) CWE-401 8.6 High 2021-10-06
CVE-2021-34702 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability — Cisco Identity Services Engine Software CWE-200 4.3 Medium 2021-10-06
CVE-2021-34706 Cisco Identity Services Engine XML External Entity Injection Vulnerability — Cisco Identity Services Engine Software CWE-611 6.4 Medium 2021-10-06
CVE-2021-34710 Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities — Cisco Analog Telephone Adaptor (ATA) Software CWE-770 8.8 High 2021-10-06
CVE-2021-34711 Cisco IP Phone Software Arbitrary File Read Vulnerability — Cisco IP Phones with Multiplatform Firmware CWE-36 5.5 Medium 2021-10-06
CVE-2021-34735 Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities — Cisco Analog Telephone Adaptor (ATA) Software CWE-770 8.8 High 2021-10-06
CVE-2021-34742 Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability — Cisco Vision Dynamic Signage Director CWE-79 6.1 Medium 2021-10-06
CVE-2021-34744 Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities — Cisco Small Business 220 Series Smart Plus Switches CWE-540 4.9 Medium 2021-10-06
CVE-2021-34748 Cisco Intersight Virtual Appliance Command Injection Vulnerability — Cisco Intersight Virtual Appliance CWE-77 8.8 High 2021-10-06

This page lists every published CVE security advisory associated with Cisco. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.