Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Cisco — Vulnerabilities & Security Advisories 3365

Browse all 3365 CVE security advisories affecting Cisco. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cisco Systems operates as a global leader in networking hardware, software, and telecommunications services, providing critical infrastructure for enterprise connectivity and cloud security. With over 3,000 recorded CVEs, the company’s attack surface is extensive, reflecting the complexity of its diverse product portfolio. Historically, vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from legacy protocols or complex configuration interfaces. Notable incidents include the 2023 supply chain compromise affecting the Cisco AnyConnect Secure Mobility Client, which allowed attackers to bypass authentication mechanisms. These breaches highlight risks associated with widely deployed endpoint security agents. The sheer volume of disclosed issues underscores the challenges inherent in maintaining security across such a vast ecosystem of interconnected devices and software solutions, requiring rigorous patch management and continuous monitoring to mitigate potential exploitation by threat actors targeting critical network infrastructure.

Top products by Cisco: Cisco Small Business RV Series Router Firmware Cisco IOS XE Software Cisco Identity Services Engine Software Cisco Adaptive Security Appliance (ASA) Software Cisco Firepower Management Center Cisco IOS XR Software Cisco Firepower Threat Defense Software Cisco NX-OS Software Cisco Data Center Network Manager Cisco SD-WAN vManage Cisco SD-WAN Solution Cisco Webex Meetings Cisco Unified Communications Manager Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco Prime Infrastructure Cisco Enterprise NFV Infrastructure Software IOS Cisco IOS Cisco Catalyst SD-WAN Manager Cisco WebEx WRF Player Cisco Digital Network Architecture Center (DNA Center) Cisco Email Security Appliance (ESA) Cisco Aironet Access Point Software Cisco RoomOS Software Cisco Unified Contact Center Express Cisco Unified Computing System (Managed) Cisco Secure Email Cisco Nexus Dashboard Cisco Application Policy Infrastructure Controller (APIC) Cisco Unity Connection
CVE ID Title CVSS Severity Published
CVE-2020-3317 Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability — Cisco Firepower Threat Defense Software CWE-20 7.5 - 2020-10-21
CVE-2020-3352 Cisco Firepower Threat Defense Software Hidden Commands Vulnerability — Cisco Firepower Threat Defense Software CWE-912 5.5 - 2020-10-21
CVE-2020-3373 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-400 8.6 High 2020-10-21
CVE-2020-3410 Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability — Cisco Firepower Management Center CWE-287 8.1 High 2020-10-21
CVE-2020-3436 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-434 8.6 - 2020-10-21
CVE-2020-3455 Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability — Cisco Firepower Extensible Operating System (FXOS) CWE-693 6.7 - 2020-10-21
CVE-2020-3456 Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-352 8.8 High 2020-10-21
CVE-2020-3457 Cisco FXOS Software Command Injection Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-78 7.8 - 2020-10-21
CVE-2020-3458 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities — Cisco Adaptive Security Appliance (ASA) Software CWE-693 6.7 - 2020-10-21
CVE-2020-3459 Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability — Cisco Firepower Extensible Operating System (FXOS) CWE-78 7.8 - 2020-10-21
CVE-2020-3499 Cisco Firepower Management Center Software Denial of Service Vulnerability — Cisco Firepower Management Center CWE-399 8.6 - 2020-10-21
CVE-2020-3514 Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability — Cisco Firepower Threat Defense Software CWE-216 8.2 High 2020-10-21
CVE-2020-3515 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities — Cisco Firepower Management Center CWE-79 4.8 - 2020-10-21
CVE-2020-3528 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-400 8.6 High 2020-10-21
CVE-2020-3529 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-400 8.6 High 2020-10-21
CVE-2020-3533 Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability — Cisco Firepower Threat Defense Software CWE-400 8.6 High 2020-10-21
CVE-2020-3549 Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability — Cisco Firepower Management Center CWE-326 6.5 - 2020-10-21
CVE-2020-3550 Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability — Cisco Firepower Management Center CWE-22 8.1 - 2020-10-21
CVE-2020-3553 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities — Cisco Firepower Management Center CWE-79 4.8 - 2020-10-21
CVE-2020-3299 Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability — Cisco Firepower Threat Defense Software CWE-693 5.3 - 2020-10-21
CVE-2020-3427 Duo Authentication for Windows Logon and RDP Privilege Escalation Vulnerability — Duo Authentication for Windows Logon and RDP CWE-280 6.6 Medium 2020-10-14
CVE-2020-3483 Duo Network Gateway (DNG) Information Disclosure Vulnerability — Duo Network Gateway (DNG) CWE-256 7.1 High 2020-10-14
CVE-2020-3602 Cisco StarOS Privilege Escalation Vulnerability — Cisco ASR 5000 Series Software CWE-20 6.3 Medium 2020-10-08
CVE-2020-3601 Cisco StarOS Privilege Escalation Vulnerability — Cisco ASR 5000 Series Software CWE-20 4.4 Medium 2020-10-08
CVE-2020-3598 Cisco Vision Dynamic Signage Director Missing Authentication Vulnerability — Cisco Vision Dynamic Signage Director CWE-306 6.5 Medium 2020-10-08
CVE-2020-3597 Cisco Nexus Data Broker Software Path Traversal Vulnerability — Cisco Nexus Data Broker CWE-23 5.4 Medium 2020-10-08
CVE-2020-3596 Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-789 5.9 Medium 2020-10-08
CVE-2020-3589 Cisco Identity Services Engine Cross-Site Scripting Vulnerability — Cisco Identity Services Engine Software CWE-79 4.8 Medium 2020-10-08
CVE-2020-3568 Cisco Email Security Appliance URL Filtering Bypass Vulnerability — Cisco Email Security Appliance (ESA) CWE-20 5.8 Medium 2020-10-08
CVE-2020-3567 Cisco Industrial Network Director Denial of Service Vulnerability — Cisco Industrial Network Director CWE-20 6.5 Medium 2020-10-08

This page lists every published CVE security advisory associated with Cisco. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.