Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2023-20238

Summary
Assigner-cisco
Assigner Org ID-d1c1063e-7a18-46af-9102-31f8928bc633
Published At-06 Sep, 2023 | 17:08
Updated At-16 Dec, 2025 | 18:23
Rejected At-
Credits

A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to the method used to validate SSO tokens. An attacker could exploit this vulnerability by authenticating to the application with forged credentials. A successful exploit could allow the attacker to commit toll fraud or to execute commands at the privilege level of the forged account. If that account is an Administrator account, the attacker would have the ability to view confidential information, modify customer settings, or modify settings for other users. To exploit this vulnerability, the attacker would need a valid user ID that is associated with an affected Cisco BroadWorks system.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
â–¼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:cisco
Assigner Org ID:d1c1063e-7a18-46af-9102-31f8928bc633
Published At:06 Sep, 2023 | 17:08
Updated At:16 Dec, 2025 | 18:23
Rejected At:
â–¼CVE Numbering Authority (CNA)

A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to the method used to validate SSO tokens. An attacker could exploit this vulnerability by authenticating to the application with forged credentials. A successful exploit could allow the attacker to commit toll fraud or to execute commands at the privilege level of the forged account. If that account is an Administrator account, the attacker would have the ability to view confidential information, modify customer settings, or modify settings for other users. To exploit this vulnerability, the attacker would need a valid user ID that is associated with an affected Cisco BroadWorks system.

Affected Products
Vendor
Cisco Systems, Inc.Cisco
Product
Cisco BroadWorks
Versions
Affected
  • 23.0
  • 23.0 ap383785
  • 23.0 ap382487
  • 23.0 ap381781
  • 23.0 ap360007
  • 23.0 ap369295
  • 23.0 ap366358
  • 23.0 ap366677
  • 23.0 ap366803
  • 23.0 ap363128
  • 23.0 ap369529
  • 23.0 ap368445
  • 23.0 ap369227
  • 23.0 ap367332
  • 23.0 ap369881
  • 23.0 ap367874
  • 23.0 ap367974
  • 23.0 ap367998
  • 23.0 ap372337
  • 23.0 ap372706
  • 23.0 ap370193
  • 23.0 ap372389
  • 23.0 ap372708
  • 23.0 ap370911
  • 23.0 ap371681
  • 23.0 ap370952
  • 23.0 ap371436
  • 23.0 ap371155
  • 23.0 ap371682
  • 23.0 ap371775
  • 23.0 ap375449
  • 23.0 ap375720
  • 23.0 ap375661
  • 23.0 ap375097
  • 23.0 ap373562
  • 23.0 ap373015
  • 23.0 ap374971
  • 23.0 ap373034
  • 23.0 ap374324
  • 23.0 ap373899
  • 23.0 ap376041
  • 23.0 ap375003
  • 23.0 ap373539
  • 23.0 ap376179
  • 23.0 ap373299
  • 23.0 ap375908
  • 23.0 ap373391
  • 23.0 ap376252
  • 23.0 ap376429
  • 23.0 ap376410
  • 23.0 ap376426
  • 23.0 ap376485
  • 23.0 ap376620
  • 23.0 ap378025
  • 23.0 ap376671
  • 23.0 ap376614
  • 23.0 ap377578
  • 23.0 ap377516
  • 23.0 ap377515
  • 23.0 ap377494
  • 23.0 ap377984
  • 23.0 ap378863
  • 23.0 ap378882
  • 23.0 ap378218
  • 23.0 ap380161
  • 23.0 ap378257
  • 23.0 ap379888
  • 23.0 ap379326
  • 23.0 ap377149
  • 23.0 ap380446
  • 23.0 ap380180
  • 23.0 ap376935
  • 23.0 ap380473
  • 23.0 ap381091
  • 23.0 ap380783
  • 23.0 ap380537
  • 23.0 ap380512
  • 23.0 ap381072
  • 23.0 ap381584
  • 23.0 ap381088
  • 23.0 ap382053
  • 23.0 ap382253
  • 23.0 ap382709
  • 23.0 ap382717
  • 23.0 ap381498
  • 23.0 ap382992
  • 23.0 ap383594
  • 23.0 ap383168
  • 23.0 ap382362
  • 23.0 ap384431
  • 23.0 ap384428
  • 22.0
  • 22.0 ap375345
  • 22.0 ap382358
  • 22.0 ap347741
  • 22.0 ap377577
  • 22.0 ap372243
  • 22.0 ap372504
  • 22.0 ap360116
  • 22.0 ap368125
  • 22.0 ap367732
  • 22.0 ap357506
  • 22.0 ap380486
  • 22.0 ap379780
  • 22.0 ap351263
  • 22.0 ap366916
  • 22.0 ap363363
  • 22.0 ap374507
  • 22.0 ap372845
  • 22.0 ap373684
  • 22.0 ap366898
  • 22.0 ap368180
  • 22.0 ap366882
  • 22.0 ap369774
  • 22.0 ap374269
  • 22.0 ap365223
  • 22.0 ap359972
  • 22.0 ap359433
  • 22.0 ap359991
  • 22.0 ap358357
  • 22.0 ap360244
  • 22.0 ap369931
  • 22.0 ap367874
  • 22.0 ap376710
  • 22.0 ap342836
  • 22.0 ap346307
  • 22.0 ap345032
  • 22.0 ap354070
  • 22.0 ap354069
  • 22.0 ap353915
  • 22.0 ap349201
  • 22.0 ap350217
  • 22.0 ap350179
  • 22.0 ap354313
  • 22.0 ap354098
  • 22.0 ap353975
  • 22.0 ap348945
  • 22.0 ap354090
  • 22.0 ap350573
  • 22.0 ap352516
  • 22.0 ap352109
  • 22.0 ap353384
  • 22.0 ap353490
  • 22.0 ap352962
  • 22.0 ap352703
  • 22.0 ap353418
  • 22.0 ap351700
  • 22.0 ap352205
  • 22.0 ap353360
  • 22.0 ap352932
  • 22.0 ap354921
  • 22.0 ap352726
  • 22.0 ap355757
  • 22.0 ap352972
  • 22.0 ap353577
  • 22.0 ap356603
  • 22.0 ap355894
  • 22.0 ap355385
  • 22.0 ap353311
  • 22.0 ap355300
  • 22.0 ap355083
  • 22.0 ap357047
  • 22.0 ap353681
  • 22.0 ap356848
  • 22.0 ap356706
  • 22.0 ap356474
  • 22.0 ap355091
  • 22.0 ap354785
  • 22.0 ap355905
  • 22.0 ap355365
  • 22.0 ap356359
  • 22.0 ap356434
  • 22.0 ap354936
  • 22.0 ap355285
  • 22.0 ap355674
  • 22.0 ap355922
  • 22.0 ap354597
  • 22.0 ap356458
  • 22.0 ap356140
  • 22.0 ap354413
  • 22.0 ap357400
  • 22.0 ap357632
  • 22.0 ap356390
  • 22.0 ap357607
  • 22.0 ap357447
  • 22.0 ap357560
  • 22.0 ap357645
  • 22.0 ap357768
  • 22.0 ap357859
  • 22.0 ap357769
  • 22.0 ap358469
  • 22.0 ap359049
  • 22.0 ap358971
  • 22.0 ap358246
  • 22.0 ap358234
  • 22.0 ap359156
  • 22.0 ap359549
  • 22.0 ap358454
  • 22.0 ap358563
  • 22.0 ap360250
  • 22.0 ap360564
  • 22.0 ap358887
  • 22.0 ap359470
  • 22.0 ap359465
  • 22.0 ap359748
  • 22.0 ap360817
  • 22.0 ap360201
  • 22.0 ap361153
  • 22.0 ap360904
  • 22.0 ap359644
  • 22.0 ap359765
  • 22.0 ap360912
  • 22.0 ap360184
  • 22.0 ap361520
  • 22.0 ap362771
  • 22.0 ap361445
  • 22.0 ap361560
  • 22.0 ap362848
  • 22.0 ap361559
  • 22.0 ap361820
  • 22.0 ap361533
  • 22.0 ap362163
  • 22.0 ap362001
  • 22.0 ap362276
  • 22.0 ap362490
  • 22.0 ap361154
  • 22.0 ap362799
  • 22.0 ap363815
  • 22.0 ap362328
  • 22.0 ap363332
  • 22.0 ap368026
  • 22.0 ap363521
  • 22.0 ap364199
  • 22.0 ap363568
  • 22.0 ap363759
  • 22.0 ap363596
  • 22.0 ap366701
  • 22.0 ap366174
  • 22.0 ap363729
  • 22.0 ap363770
  • 22.0 ap366358
  • 22.0 ap366744
  • 22.0 ap366180
  • 22.0 ap366649
  • 22.0 ap365172
  • 22.0 ap365115
  • 22.0 ap366656
  • 22.0 ap364521
  • 22.0 ap364844
  • 22.0 ap364781
  • 22.0 ap365146
  • 22.0 ap364797
  • 22.0 ap364932
  • 22.0 ap365545
  • 22.0 ap365800
  • 22.0 ap365173
  • 22.0 ap364473
  • 22.0 ap365400
  • 22.0 ap367396
  • 22.0 ap365632
  • 22.0 ap365905
  • 22.0 ap367109
  • 22.0 ap365449
  • 22.0 ap365685
  • 22.0 ap367434
  • 22.0 ap365597
  • 22.0 ap365801
  • 22.0 ap365730
  • 22.0 ap365758
  • 22.0 ap365920
  • 22.0 ap371313
  • 22.0 ap367291
  • 22.0 ap365727
  • 22.0 ap367524
  • 22.0 ap371587
  • 22.0 ap367453
  • 22.0 ap365601
  • 22.0 ap365779
  • 22.0 ap371871
  • 22.0 ap371437
  • 22.0 ap372043
  • 22.0 ap372016
  • 22.0 ap367367
  • 22.0 ap372072
  • 22.0 ap372177
  • 22.0 ap371681
  • 22.0 ap372354
  • 22.0 ap371656
  • 22.0 ap371033
  • 22.0 ap371583
  • 22.0 ap371911
  • 22.0 ap371467
  • 22.0 ap372371
  • 22.0 ap368695
  • 22.0 ap368913
  • 22.0 ap368987
  • 22.0 ap372024
  • 22.0 ap372152
  • 22.0 ap371961
  • 22.0 ap369674
  • 22.0 ap369173
  • 22.0 ap369863
  • 22.0 ap369641
  • 22.0 ap368604
  • 22.0 ap368087
  • 22.0 ap368216
  • 22.0 ap369934
  • 22.0 ap368326
  • 22.0 ap369219
  • 22.0 ap369227
  • 22.0 ap368422
  • 22.0 ap369881
  • 22.0 ap369550
  • 22.0 ap369668
  • 22.0 ap369571
  • 22.0 ap372433
  • 22.0 ap370654
  • 22.0 ap370138
  • 22.0 ap370615
  • 22.0 ap372643
  • 22.0 ap372708
  • 22.0 ap370590
  • 22.0 ap372390
  • 22.0 ap372757
  • 22.0 ap370636
  • 22.0 ap372750
  • 22.0 ap372706
  • 22.0 ap370269
  • 22.0 ap370180
  • 22.0 ap370675
  • 22.0 ap370737
  • 22.0 ap370424
  • 22.0 ap370544
  • 22.0 ap374339
  • 22.0 ap370459
  • 22.0 ap370545
  • 22.0 ap370389
  • 22.0 ap374803
  • 22.0 ap370358
  • 22.0 ap373539
  • 22.0 ap373118
  • 22.0 ap373855
  • 22.0 ap373820
  • 22.0 ap373438
  • 22.0 ap374660
  • 22.0 ap373018
  • 22.0 ap373954
  • 22.0 ap374230
  • 22.0 ap374330
  • 22.0 ap374460
  • 22.0 ap372956
  • 22.0 ap373111
  • 22.0 ap374114
  • 22.0 ap373122
  • 22.0 ap373108
  • 22.0 ap374356
  • 22.0 ap375069
  • 22.0 ap373899
  • 22.0 ap374971
  • 22.0 ap375862
  • 22.0 ap375354
  • 22.0 ap375688
  • 22.0 ap373046
  • 22.0 ap373452
  • 22.0 ap374334
  • 22.0 ap374428
  • 22.0 ap374596
  • 22.0 ap372963
  • 22.0 ap376041
  • 22.0 ap376410
  • 22.0 ap376298
  • 22.0 ap372799
  • 22.0 ap376181
  • 22.0 ap375090
  • 22.0 ap376416
  • 22.0 ap373098
  • 22.0 ap375937
  • 22.0 ap376531
  • 22.0 ap375465
  • 22.0 ap376100
  • 22.0 ap375634
  • 22.0 ap375091
  • 22.0 ap375018
  • 22.0 ap375743
  • 22.0 ap375383
  • 22.0 ap375719
  • 22.0 ap376614
  • 22.0 ap376541
  • 22.0 ap375685
  • 22.0 ap374895
  • 22.0 ap376429
  • 22.0 ap379838
  • 22.0 ap380187
  • 22.0 ap380143
  • 22.0 ap379972
  • 22.0 ap380535
  • 22.0 ap380117
  • 22.0 ap380473
  • 22.0 ap375924
  • 22.0 ap379833
  • 22.0 ap376661
  • 22.0 ap380041
  • 22.0 ap380391
  • 22.0 ap379795
  • 22.0 ap376701
  • 22.0 ap376668
  • 22.0 ap377384
  • 22.0 ap377480
  • 22.0 ap377581
  • 22.0 ap376652
  • 22.0 ap376620
  • 22.0 ap378405
  • 22.0 ap377494
  • 22.0 ap378440
  • 22.0 ap378581
  • 22.0 ap377307
  • 22.0 ap377566
  • 22.0 ap378585
  • 22.0 ap377149
  • 22.0 ap378471
  • 22.0 ap377412
  • 22.0 ap377068
  • 22.0 ap377757
  • 22.0 ap378332
  • 22.0 ap379016
  • 22.0 ap378866
  • 22.0 ap378079
  • 22.0 ap378509
  • 22.0 ap378953
  • 22.0 ap377779
  • 22.0 ap379008
  • 22.0 ap379694
  • 22.0 ap379597
  • 22.0 ap378882
  • 22.0 ap379389
  • 22.0 ap379487
  • 22.0 ap379374
  • 22.0 ap380771
  • 22.0 ap381594
  • 22.0 ap381243
  • 22.0 ap380629
  • 22.0 ap380751
  • 22.0 ap382158
  • 22.0 ap378999
  • 22.0 ap381136
  • 22.0 ap382240
  • 22.0 ap382362
  • 22.0 ap382192
  • 22.0 ap381091
  • 22.0 ap382251
  • 22.0 ap381732
  • 22.0 ap381584
  • 22.0 ap381118
  • 22.0 ap382717
  • 22.0 ap383569
  • 22.0 ap382487
  • 22.0 ap383002
  • 22.0 ap382434
  • 22.0 ap383170
  • 22.0 ap383309
  • 22.0 ap383514
  • 22.0 ap383710
  • 22.0 ap382977
  • 22.0 ap382488
  • 22.0 ap383134
  • 22.0 ap359429
  • 21.sp1 ap351795
  • 21.sp1 ap348143
  • 21.sp1 ap351216
  • 21.sp1 ap339376
  • 21.sp1 ap358132
  • 21.sp1 ap355717
  • 21.sp1 ap346074
  • 21.sp1 ap373102
  • 21.sp1 ap235252
  • 21.sp1 ap242300
  • 21.sp1 ap338964
  • 21.sp1 ap339196
  • 21.sp1 ap341645
  • 21.sp1 ap341897
  • 21.sp1 ap342461
  • 21.sp1 ap342625
  • 21.sp1 ap342755
  • 21.sp1 ap342853
  • 21.sp1 ap343352
  • 21.sp1 ap344270
  • 21.sp1 ap344479
  • 21.sp1 ap344681
  • 21.sp1 ap345054
  • 21.sp1 ap345293
  • 21.sp1 ap345755
  • 21.sp1 ap348472
  • 21.sp1 ap349222
  • 21.sp1 ap350050
  • 21.sp1 ap350189
  • 21.sp1 ap351248
  • 21.sp1 ap351295
  • 21.sp1 ap351530
  • 21.sp1 ap351754
  • 21.sp1 ap351898
  • 21.sp1 ap352082
  • 21.sp1 ap352205
  • 21.sp1 ap352972
  • 21.sp1 ap353418
  • 21.sp1 ap353841
  • 21.sp1 ap354707
  • 21.sp1 ap356271
  • 21.sp1 ap356787
  • 21.sp1 ap357574
  • 21.sp1 ap358730
  • 21.sp1 ap360211
  • 21.sp1 ap360306
  • 21.sp1 ap361420
  • 21.sp1 ap365379
  • 21.sp1 ap365390
  • 21.sp1 ap366348
  • 21.sp1 ap374822
  • 21.sp1 ap375026
  • 21.sp1 ap375053
  • 21.0 ap349066
  • 21.0 ap364358
  • 21.0 ap362637
  • 21.0 ap342145
  • 21.0 ap357571
  • 21.0 ap362825
  • 21.0 ap361559
  • 21.0 ap339395
  • 21.0 ap348945
  • 21.0 ap346902
  • 21.0 ap350308
  • 21.0 ap363301
  • 21.0 ap349850
  • 21.0 ap344752
  • 21.0 ap347640
  • 21.0 ap350111
  • 21.0 ap355616
  • 21.0 ap353841
  • 21.0 ap346128
  • 21.0 ap350204
  • 21.0 ap341897
  • 21.0 ap347064
  • 21.0 ap350032
  • 21.0 ap351261
  • 21.0 ap352182
  • 21.0 ap350760
  • 21.0 ap363408
  • 21.sp1 ap340545
  • 21.sp1 ap341683
  • 21.sp1 ap341909
  • 21.sp1 ap342214
  • 21.sp1 ap344301
  • 21.sp1 ap344783
  • 21.sp1 ap346270
  • 21.sp1 ap346351
  • 21.sp1 ap347928
  • 21.sp1 ap349517
  • 21.sp1 ap349090
  • 21.sp1 ap351315
  • 21.sp1 ap352304
  • 21.sp1 ap351738
  • 21.sp1 ap354194
  • 21.sp1 ap357347
  • 21.sp1 ap364778
  • 21.sp1 ap372422
  • 21.sp1 ap371281
  • 21.sp1 ap370908
  • 21.sp1 ap379493
  • 21.sp1 ap380506
  • 21.sp9 ap360116
  • 21.sp9 ap367207
  • RI.2021.02
  • RI.2021.08
  • RI.2021.09
  • RI.2021.10
  • RI.2021.11
  • RI.2021.12
  • RI.2022.02
  • RI.2022.03
  • RI.2022.04
  • RI.2022.07
  • RI.2022.06
  • RI.2022.05
  • RI.2022.08
  • RI.2022.09
  • RI.2022.10
  • RI.2022.12
  • RI.2023.01
  • RI.2023.03
  • RI.2023.02
  • RI.2023.04
  • RI.2023.05
  • RI.2023.07
Problem Types
TypeCWE IDDescription
cweCWE-287Improper Authentication
Type: cwe
CWE ID: CWE-287
Description: Improper Authentication
Metrics
VersionBase scoreBase severityVector
3.110.0CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Version: 3.1
Base score: 10.0
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX
N/A
Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX
Resource: N/A
â–¼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX
x_transferred
Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
â–¼National Vulnerability Database (NVD)
nvd.nist.gov
Source:ykramarz@cisco.com
Published At:06 Sep, 2023 | 18:15
Updated At:25 Jan, 2024 | 17:15

A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to the method used to validate SSO tokens. An attacker could exploit this vulnerability by authenticating to the application with forged credentials. A successful exploit could allow the attacker to commit toll fraud or to execute commands at the privilege level of the forged account. If that account is an Administrator account, the attacker would have the ability to view confidential information, modify customer settings, or modify settings for other users. To exploit this vulnerability, the attacker would need a valid user ID that is associated with an affected Cisco BroadWorks system.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary3.110.0CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Type: Primary
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Secondary
Version: 3.1
Base score: 10.0
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CPE Matches

Cisco Systems, Inc.
cisco
>>broadworks_application_delivery_platform>>ri.2023.06
cpe:2.3:a:cisco:broadworks_application_delivery_platform:ri.2023.06:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>broadworks_application_delivery_platform>>ri.2023.07
cpe:2.3:a:cisco:broadworks_application_delivery_platform:ri.2023.07:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>broadworks_xtended_services_platform>>Versions before 23.0.1075.ap384245(exclusive)
cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:-:*:*:*
Cisco Systems, Inc.
cisco
>>broadworks_xtended_services_platform>>2023.06
cpe:2.3:a:cisco:broadworks_xtended_services_platform:2023.06:*:*:*:release_independent:*:*:*
Cisco Systems, Inc.
cisco
>>broadworks_xtended_services_platform>>2023.07
cpe:2.3:a:cisco:broadworks_xtended_services_platform:2023.07:*:*:*:release_independent:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-noinfoPrimarynvd@nist.gov
CWE-287Secondaryykramarz@cisco.com
CWE ID: NVD-CWE-noinfo
Type: Primary
Source: nvd@nist.gov
CWE ID: CWE-287
Type: Secondary
Source: ykramarz@cisco.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhXykramarz@cisco.com
Vendor Advisory
Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX
Source: ykramarz@cisco.com
Resource:
Vendor Advisory

Change History

0
Information is not available yet

Similar CVEs

1149Records found

CVE-2019-1620
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-83.78% / 99.66%
||
7 Day CHG~0.00%
Published-27 Jun, 2019 | 03:05
Updated-19 Nov, 2024 | 19:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to write arbitrary files on the filesystem and execute code with root privileges on the affected device.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-data_center_network_managerCisco Data Center Network Manager
CWE ID-CWE-264
Not Available
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-15976
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-92.84% / 99.82%
||
7 Day CHG~0.00%
Published-06 Jan, 2020 | 07:40
Updated-15 Nov, 2024 | 17:53
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-data_center_network_managerCisco Data Center Network Manager
CWE ID-CWE-798
Use of Hard-coded Credentials
CVE-2019-15958
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-8.1||HIGH
EPSS-3.29% / 87.17%
||
7 Day CHG~0.00%
Published-26 Nov, 2019 | 03:11
Updated-20 Nov, 2024 | 17:04
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability

A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input validation during the initial High Availability (HA) configuration and registration process of an affected device. An attacker could exploit this vulnerability by uploading a malicious file during the HA registration period. A successful exploit could allow the attacker to execute arbitrary code with root-level privileges on the underlying operating system. Note: This vulnerability can only be exploited during the HA registration period. See the Details section for more information.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-prime_infrastructureevolved_programmable_network_managerCisco Prime Infrastructure
CWE ID-CWE-20
Improper Input Validation
CVE-2019-1619
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-82.82% / 99.64%
||
7 Day CHG~0.00%
Published-27 Jun, 2019 | 03:00
Updated-19 Nov, 2024 | 19:04
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Data Center Network Manager Authentication Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session management on affected DCNM software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-data_center_network_managerCisco Data Center Network Manager
CWE ID-CWE-284
Improper Access Control
CWE ID-CWE-798
Use of Hard-coded Credentials
CVE-2019-15260
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-2.99% / 85.92%
||
7 Day CHG~0.00%
Published-16 Oct, 2019 | 18:36
Updated-19 Nov, 2024 | 18:53
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Aironet Access Points Unauthorized Access Vulnerability

A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could exploit this vulnerability by requesting specific URLs from an affected AP. An exploit could allow the attacker to gain access to the device with elevated privileges. While the attacker would not be granted access to all possible configuration options, it could allow the attacker to view sensitive information and replace some options with values of their choosing, including wireless network configuration. It would also allow the attacker to disable the AP, creating a denial of service (DoS) condition for clients associated with the AP.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-aironet_2800aironet_2800_firmwareaironet_4800_firmwareaironet_1800aironet_1560aironet_3800aironet_1540_firmwareaironet_1560_firmwareaironet_3800_firmwareaironet_1800_firmwareaironet_1540aironet_4800Cisco Aironet Access Point Software
CWE ID-CWE-284
Improper Access Control
CVE-2019-12630
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-6.5||MEDIUM
EPSS-65.85% / 99.19%
||
7 Day CHG~0.00%
Published-02 Oct, 2019 | 18:15
Updated-19 Nov, 2024 | 18:54
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Security Manager Java Deserialization Vulnerability

A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a malicious serialized Java object to a specific listener on an affected system. A successful exploit could allow the attacker to execute arbitrary commands on the device with the privileges of casuser.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-security_managerCisco Security Manager
CWE ID-CWE-20
Improper Input Validation
CWE ID-CWE-502
Deserialization of Untrusted Data
CVE-2025-20358
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.4||CRITICAL
EPSS-0.93% / 56.98%
||
7 Day CHG~0.00%
Published-05 Nov, 2025 | 16:31
Updated-26 Feb, 2026 | 17:47
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Unified Contact Center Express Editor Authentication Bypass Vulnerability

A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vulnerability is due to improper authentication mechanisms in the communication between the CCX Editor and an affected Unified CCX server. An attacker could exploit this vulnerability by redirecting the authentication flow to a malicious server and tricking the CCX Editor into believing the authentication was successful. A successful exploit could allow the attacker to create and execute arbitrary scripts on the underlying operating system of an affected Unified CCX server, as an internal non-root user account.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-unified_contact_center_expressCisco Unified Contact Center Express
CWE ID-CWE-306
Missing Authentication for Critical Function
CVE-2025-20393
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-29.51% / 97.99%
||
7 Day CHG~0.00%
Published-17 Dec, 2025 | 16:47
Updated-26 Feb, 2026 | 16:07
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-12-24||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-secure_email_and_web_manager_virtual_appliance_m600vasyncossecure_email_and_web_manager_m690secure_email_and_web_manager_m380secure_email_and_web_manager_virtual_appliance_m300vsecure_email_and_web_manager_m190secure_email_gateway_virtual_appliance_c300vsecure_email_and_web_manager_m695secure_email_gateway_c195secure_email_gateway_virtual_appliance_c100vsecure_email_gateway_virtual_appliance_c600vsecure_email_and_web_manager_m390xsecure_email_and_web_manager_m390secure_email_gateway_c395secure_email_and_web_manager_m195secure_email_and_web_manager_virtual_appliance_m100vsecure_email_and_web_manager_m690xsecure_email_and_web_manager_m680secure_email_and_web_manager_m395secure_email_gateway_c695secure_email_and_web_manager_m170Cisco Secure Email and Web ManagerCisco Secure EmailMultiple Products
CWE ID-CWE-20
Improper Input Validation
CVE-2025-20309
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-1.06% / 61.08%
||
7 Day CHG~0.00%
Published-02 Jul, 2025 | 16:39
Updated-26 Feb, 2026 | 18:27
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Unified Communications Manager Static SSH Credentials Vulnerability

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for the root account that are reserved for use during development. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-unified_communications_managerCisco Unified Communications Manager
CWE ID-CWE-798
Use of Hard-coded Credentials
CVE-2025-20337
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-65.10% / 99.17%
||
7 Day CHG~0.00%
Published-16 Jul, 2025 | 16:17
Updated-26 Feb, 2026 | 17:50
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-08-18||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-identity_services_engine_passive_identity_connectoridentity_services_engineCisco ISE Passive Identity ConnectorCisco Identity Services Engine SoftwareIdentity Services Engine
CWE ID-CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-20354
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-0.88% / 55.31%
||
7 Day CHG~0.00%
Published-05 Nov, 2025 | 16:31
Updated-26 Feb, 2026 | 17:47
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Unified Contact Center Express Remote Code Execution Vulnerability

A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanisms that are associated to specific Cisco Unified CCX features. An attacker could exploit this vulnerability by uploading a crafted file to an affected system through the Java RMI process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-unified_contact_center_expressCisco Unified Contact Center Express
CWE ID-CWE-434
Unrestricted Upload of File with Dangerous Type
CVE-2015-10011
Matching Score-8
Assigner-VulDB
ShareView Details
Matching Score-8
Assigner-VulDB
CVSS Score-4.6||MEDIUM
EPSS-0.86% / 54.77%
||
7 Day CHG~0.00%
Published-02 Jan, 2023 | 21:00
Updated-10 Apr, 2025 | 19:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
OpenDNS OpenResolve endpoints.py neutralization for logs

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is recommended to apply a patch to fix this issue. The identifier VDB-217197 was assigned to this vulnerability.

Action-Not Available
Vendor-OpenDNS (Cisco Systems, Inc.)Cisco Systems, Inc.
Product-openresolveOpenResolve
CWE ID-CWE-117
Improper Output Neutralization for Logs
CWE ID-CWE-116
Improper Encoding or Escaping of Output
CVE-2025-20188
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-17.89% / 96.86%
||
7 Day CHG~0.00%
Published-07 May, 2025 | 17:34
Updated-23 Jun, 2025 | 15:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system. This vulnerability is due to the presence of a hard-coded JSON Web Token (JWT) on an affected system. An attacker could exploit this vulnerability by sending crafted HTTPS requests to the AP file upload interface. A successful exploit could allow the attacker to upload files, perform path traversal, and execute arbitrary commands with root privileges.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-ios_xeCisco IOS XE Software
CWE ID-CWE-798
Use of Hard-coded Credentials
CVE-2025-20282
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-11.17% / 95.49%
||
7 Day CHG+1.37%
Published-25 Jun, 2025 | 16:29
Updated-26 Feb, 2026 | 17:50
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root. This vulnerability is due a lack of file validation checks that would prevent uploaded files from being placed in privileged directories on an affected system. An attacker could exploit this vulnerability by uploading a crafted file to the affected device. A successful exploit could allow the attacker to store malicious files on the affected system and then execute arbitrary code or obtain root privileges on the system.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-identity_services_engineidentity_services_engine_passive_identity_connectorCisco Identity Services Engine Software
CWE ID-CWE-269
Improper Privilege Management
CVE-2025-20265
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-14.78% / 96.32%
||
7 Day CHG~0.00%
Published-14 Aug, 2025 | 16:30
Updated-26 Feb, 2026 | 17:48
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device.  This vulnerability is due to a lack of proper handling of user input during the authentication phase. An attacker could exploit this vulnerability by sending crafted input when entering credentials that will be authenticated at the configured RADIUS server. A successful exploit could allow the attacker to execute commands at a high privilege level. Note: For this vulnerability to be exploited, Cisco Secure FMC Software must be configured for RADIUS authentication for the web-based management interface, SSH management, or both.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-secure_firewall_management_centerCisco Firepower Management Center
CWE ID-CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-20281
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-96.73% / 99.88%
||
7 Day CHG~0.00%
Published-25 Jun, 2025 | 16:11
Updated-26 Feb, 2026 | 17:50
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-08-18||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-identity_services_engine_passive_identity_connectoridentity_services_engineCisco Identity Services Engine SoftwareIdentity Services Engine
CWE ID-CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-20286
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.9||CRITICAL
EPSS-1.09% / 61.98%
||
7 Day CHG~0.00%
Published-04 Jun, 2025 | 16:18
Updated-15 Oct, 2025 | 17:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
ISE on AWS Static Credential

A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configurations, or disrupt services within the impacted systems. This vulnerability exists because credentials are improperly generated when Cisco ISE is being deployed on cloud platforms, resulting in different Cisco ISE deployments sharing the same credentials. These credentials are shared across multiple Cisco ISE deployments as long as the software release and cloud platform are the same. An attacker could exploit this vulnerability by extracting the user credentials from Cisco ISE that is deployed in the cloud and then using them to access Cisco ISE that is deployed in other cloud environments through unsecured ports. A successful exploit could allow the attacker to access sensitive data, execute limited administrative operations, modify system configurations, or disrupt services within the impacted systems. Note: If the Primary Administration node is deployed in the cloud, then Cisco ISE is affected by this vulnerability. If the Primary Administration node is on-premises, then it is not affected.

Action-Not Available
Vendor-amazonOracle CorporationMicrosoft CorporationCisco Systems, Inc.
Product-identity_services_engineamazon_web_servicesazurecloud_infrastructureCisco Identity Services Engine Software
CWE ID-CWE-259
Use of Hard-coded Password
CVE-2025-20260
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-1.54% / 72.22%
||
7 Day CHG~0.00%
Published-18 Jun, 2025 | 17:08
Updated-26 Feb, 2026 | 17:50
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
ClamAV PDF Scanning Buffer Overflow Vulnerability

A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. This vulnerability exists because memory buffers are allocated incorrectly when PDF files are processed. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to trigger a buffer overflow, likely resulting in the termination of the ClamAV scanning process and a DoS condition on the affected software. Although unproven, there is also a possibility that an attacker could leverage the buffer overflow to execute arbitrary code with the privileges of the ClamAV process.

Action-Not Available
Vendor-Cisco Systems, Inc.ClamAV
Product-clamavClamAV
CWE ID-CWE-122
Heap-based Buffer Overflow
CVE-2018-15387
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-1.10% / 62.23%
||
7 Day CHG~0.00%
Published-05 Oct, 2018 | 14:00
Updated-26 Nov, 2024 | 14:34
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a crafted certificate to an affected device, bypassing the certificate validation. An exploit could allow an attacker to deploy a crafted system image.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-sd-wanCisco SD-WAN Solution
CWE ID-CWE-20
Improper Input Validation
CWE ID-CWE-295
Improper Certificate Validation
CVE-2018-0127
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-77.48% / 99.51%
||
7 Day CHG~0.00%
Published-08 Feb, 2018 | 07:00
Updated-02 Dec, 2024 | 21:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to the absence of user authentication requirements for certain pages that are part of the web interface and contain confidential information for an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device and examining the HTTP response to the request. A successful exploit could allow the attacker to view configuration parameters, including the administrator password, for the affected device. Cisco Bug IDs: CSCvg92739, CSCvh60172.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-rv132wrv134wrv132w_firmwarerv134w_firmwareCisco RV132W and RV134W Wireless VPN Routers
CWE ID-CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE ID-CWE-306
Missing Authentication for Critical Function
CVE-2018-0315
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-8.07% / 94.19%
||
7 Day CHG~0.00%
Published-07 Jun, 2018 | 12:00
Updated-29 Nov, 2024 | 15:06
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect memory operations that the affected software performs when the software parses a username during login authentication. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device or cause the affected device to reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are running Cisco IOS XE Software Release Fuji 16.7.1 or Fuji 16.8.1 and are configured to use AAA for login authentication. Cisco Bug IDs: CSCvi25380.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-ios_xeCisco IOS XE unknown
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2018-0147
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-18.33% / 96.93%
||
7 Day CHG~0.00%
Published-08 Mar, 2018 | 07:00
Updated-14 Jan, 2026 | 19:19
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-04-15||Apply updates per vendor instructions.

A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object. An exploit could allow the attacker to execute arbitrary commands on the device with root privileges. Cisco Bug IDs: CSCvh25988.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-secure_access_control_systemCisco Secure Access Control SystemSecure Access Control System (ACS)
CWE ID-CWE-20
Improper Input Validation
CWE ID-CWE-502
Deserialization of Untrusted Data
CVE-2018-0349
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-3.05% / 86.15%
||
7 Day CHG~0.00%
Published-18 Jul, 2018 | 23:00
Updated-29 Nov, 2024 | 14:52
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the request admin-tech command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the request admin-tech command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device and escalate their privileges to the root user. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vEdge 100 Series Routers, vEdge 1000 Series Routers, vEdge 2000 Series Routers, vEdge 5000 Series Routers, vEdge Cloud Router Platform, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi69852, CSCvi69856.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-vbond_orchestratorvedge_100mvedge-plusvedge-5000vsmart_controllervedge_100b_firmwarevedge_100wm_firmwarevedge-2000vmanage_network_managementvedge-100vedge_100bvedge-100_firmwarevedge-2000_firmwarevedge-provedge_100m_firmwarevedge-1000_firmwarevedge-5000_firmwarevedge-1000vedge_100wmCisco SD-WAN Solution unknown
CWE ID-CWE-20
Improper Input Validation
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-0150
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-4.82% / 91.05%
||
7 Day CHG~0.00%
Published-28 Mar, 2018 | 22:00
Updated-02 Dec, 2024 | 20:55
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release of Cisco IOS XE Software with the default username and password that are used at initial boot, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with privilege level 15 that has a default username and password. An attacker could exploit this vulnerability by using this account to remotely connect to an affected device. A successful exploit could allow the attacker to log in to the device with privilege level 15 access. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software Release 16.x. This vulnerability does not affect Cisco IOS XE Software releases prior to Release 16.x. Cisco Bug IDs: CSCve89880.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-ios_xe4431_integrated_services_router4451_integrated_services_routerCisco IOS XE
CWE ID-CWE-798
Use of Hard-coded Credentials
CVE-2018-0171
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-7.5||HIGH
EPSS-99.51% / 99.94%
||
7 Day CHG~0.00%
Published-28 Mar, 2018 | 22:00
Updated-14 Jan, 2026 | 18:45
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-iosCisco IOS and IOS XEIOS and IOS XE
CWE ID-CWE-20
Improper Input Validation
CWE ID-CWE-787
Out-of-bounds Write
CVE-2018-0151
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-14.47% / 96.26%
||
7 Day CHG~0.00%
Published-28 Mar, 2018 | 22:00
Updated-13 Jan, 2026 | 22:20
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-03-17||Apply updates per vendor instructions.

A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges. The vulnerability is due to incorrect bounds checking of certain values in packets that are destined for UDP port 18999 of an affected device. An attacker could exploit this vulnerability by sending malicious packets to an affected device. When the packets are processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to execute arbitrary code on the affected device with elevated privileges. The attacker could also leverage this vulnerability to cause the device to reload, causing a temporary DoS condition while the device is reloading. The malicious packets must be destined to and processed by an affected device. Traffic transiting a device will not trigger the vulnerability. Cisco Bug IDs: CSCvf73881.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-ios_xeCisco IOS and IOS XEIOS and IOS XE Software
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2018-15439
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-49.74% / 98.78%
||
7 Day CHG~0.00%
Published-08 Nov, 2018 | 17:00
Updated-26 Nov, 2024 | 14:22
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business Switches Privileged Access Vulnerability

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-sf550x-48mpsg250-10p_firmwaresf250-24psg300-10p_firmwaresg300-52_firmwaresg250-18_firmwaresg500-52mp_firmwaresg250x-24p_firmwaresg300-52sg250x-24psg200-26sg250-18sg500-28sg500x-48sg350x-24mpsg200-50p_firmwaresg200-26_firmwaresx550x-24sg550x-48p_firmwaresg200-08psf200-24_firmwaresg300-20sg500-28psf250-24p_firmwaresg350x-48_firmwaresg350xg-24tsx550x-12fsf200-48sg350x-24_firmwaresf350-48psf350-48sg550x-48mp_firmwaresg500x-24psf300-48psf300-24_firmwaresg500-52sf300-24mp_firmwaresg500-28mpp_firmwaresf550x-24mp_firmwaresg500-52psg350-28sg350x-24mp_firmwaresg500-52_firmwaresf250-24sg200-10fpsf300-24ppsg550x-48psf550x-48p_firmwaresg350x-48mp_firmwaresg250x-24_firmwaresg250-50hp_firmwaresx550x-24ft_firmwaresg300-10mpp_firmwaresg350x-24sg250x-24sf550x-48_firmwaresg200-50sg300-52mpsg350-10p_firmwaresf200-48p_firmwaresg200-50psg200-26fp_firmwaresf302-08p_firmwaresg350-10psg500-52mpsg355-10psx550x-16ft_firmwaresg250-50psg300-52psf250-48sg250-26hpsg250x-48p_firmwaresg300-20_firmwaresf500-24p_firmwaresf500-48sg300-10sfpsg200-50fpsg550x-24_firmwaresg250x-48_firmwaresg300-28_firmwaresf302-08psg500-28mppsf500-24psf200-24p_firmwaresg250-50p_firmwaresf302-08ppsf350-48p_firmwaresf300-48sg350xg-48t_firmwaresg250-26sg300-10sfp_firmwaresg250x-48sf550x-48mp_firmwaresg350-28p_firmwaresf550x-24_firmwaresf250-48hp_firmwaresg350xg-2f10sg300-28ppsg300-52mp_firmwaresf500-48_firmwaresg500-28p_firmwaresg350-10mpsf550x-48psg550x-24mppsf550x-24sf500-48psf200-24psg500-52p_firmwaresg350xg-24f_firmwaresf500-48p_firmwaresg300-28mpsf302-08mp_firmwaresf350-48mp_firmwaresf250-24_firmwaresg350-28mpsf302-08sg350-28mp_firmwaresg300-28pp_firmwaresg350x-48sf200-24sx550x-24fsg500x-48psg250-26_firmwaresg350-10mp_firmwaresf302-08mpp_firmwaresg500x-48p_firmwaresg355-10p_firmwaresg550x-24mp_firmwaresg200-18_firmwaresg300-10psg300-52p_firmwaresf300-48ppsg500x-24_firmwaresg350xg-24t_firmwaresg550x-48_firmwaresf550x-24p_firmwaresg350x-24p_firmwaresg300-10mp_firmwaresf302-08_firmwaresg200-08p_firmwaresf200-24fp_firmwaresg300-10mpsg550x-24sf300-08sg300-10ppsg250-50_firmwaresf350-48_firmwaresg250-10psg200-08sg350xg-2f10_firmwaresx550x-24f_firmwaresg250-08sg350-28psg250-26hp_firmwaresg200-26fpsg200-26p_firmwaresg350xg-48tsf550x-48sg300-28sg200-10fp_firmwaresx550x-52_firmwaresg350-28_firmwaresg300-10_firmwaresg250-08hpsg350-10sg350x-48psg550x-24mpsg500x-24sf300-24p_firmwaresx550x-16ftsg550x-48mpsg350-10_firmwaresx550x-24ftsx550x-52sg250x-48psg200-50fp_firmwaresg500x-24p_firmwaresg250-26psg300-10pp_firmwaresf500-24sg300-10sf550x-24psf300-48p_firmwaresf350-48mpsg250-50sf200-24fpsg300-10mppsg550x-24p_firmwaresg500xg-8f8t_firmwaresg300-28psf300-24psg200-26psf200-48psf300-24sg550x-24psg200-08_firmwaresg350x-48mpsf302-08mppsf302-08mpsg550x-48sf300-48pp_firmwaresf250-48_firmwaresg350x-48p_firmwaresg250-08_firmwaresf300-24mpsg300-28mp_firmwaresg350x-24psf550x-24mpsx550x-12f_firmwaresf302-08pp_firmwaresg250-50hpsg550x-24mpp_firmwaresf250-48hpsg200-18sg200-50_firmwaresg500x-48_firmwaresg250-26p_firmwaresf300-08_firmwaresg350xg-24fsf200-48_firmwaresx550x-24_firmwaresg500xg-8f8tsg500-28_firmwaresf500-24_firmwaresg250-08hp_firmwaresf300-48_firmwaresf300-24pp_firmwaresg300-28p_firmwareCisco Small Business 300 Series Managed Switches
CWE ID-CWE-798
Use of Hard-coded Credentials
CVE-2017-9521
Matching Score-8
Assigner-MITRE Corporation
ShareView Details
Matching Score-8
Assigner-MITRE Corporation
CVSS Score-9.8||CRITICAL
EPSS-3.26% / 87.08%
||
7 Day CHG~0.00%
Published-31 Jul, 2017 | 03:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows remote attackers to execute arbitrary code via a specific (but unstated) exposed service. NOTE: the scope of this CVE does NOT include the concept of "Unnecessary Services" in general; the scope is only a single service that is unnecessarily exposed, leading to remote code execution. The details of that service might be disclosed at a later date.

Action-Not Available
Vendor-commscopen/aCisco Systems, Inc.
Product-dpc3941tdpc3939barris_tg1682g_firmwaredpc3939dpc3941t_firmwaredpc3939b_firmwaredpc3939_firmwarearris_tg1682gn/a
CVE-2018-15386
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-3.44% / 87.74%
||
7 Day CHG~0.00%
Published-05 Oct, 2018 | 14:00
Updated-26 Nov, 2024 | 14:34
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and have direct unauthorized access to critical management functions. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by directly connecting to the exposed services. An exploit could allow the attacker to retrieve and modify critical system files.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-digital_network_architecture_centerCisco Digital Network Architecture Center (DNA Center)
CWE ID-CWE-16
Not Available
CVE-2017-3881
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-98.98% / 99.93%
||
7 Day CHG~0.00%
Published-17 Mar, 2017 | 22:00
Updated-22 Apr, 2026 | 15:50
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-04-15||Apply updates per vendor instructions.

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-catalyst_2960l-16ts-llie_2000-16tc-g-e_industrial_ethernet_switchcatalyst_3560e-48pd-sfcatalyst_c2928-48tc-ccatalyst_3560v2-24pscatalyst_3560v2-24dcie_2000-4ts-g_industrial_ethernet_switchcatalyst_3560x-24t-scatalyst_2960s-48lpd-lcatalyst_2960s-48ts-scatalyst_2960-plus_24pc-lcatalyst_2960c-8tc-scatalyst_3560c-12pc-scatalyst_3560x-48u-scatalyst_2960x-48ts-llie_2000-4t_industrial_ethernet_switchcatalyst_2960-24lc-scatalyst_3550_24_pwrcatalyst_2960-24-scatalyst_2960-plus_48pst-lcatalyst_4500_supervisor_engine_ivioscatalyst_4500e_supervisor_engine_8-ecatalyst_3750x-24u-ecatalyst_2960xr-24pd-lcatalyst_2960x-48fpd-lcatalyst_3560g-24pscatalyst_2960xr-48td-icatalyst_3750x-12s-scatalyst_2360-48td-scatalyst_3560x-48pf-scatalyst_4948e_ethernet_switchenhanced_layer_2_etherswitch_service_modulecatalyst_2960l-48ps-llie_2000-4t-g_industrial_ethernet_switchcatalyst_2960s-48lps-lcatalyst_3750g-24tscatalyst_4500_supervisor_engine_6l-ecatalyst_2960xr-48lps-icatalyst_2960xr-24ts-lcatalyst_blade_switch_3130catalyst_3560x-24u-lcatalyst_2960-48pst-lcatalyst_2960-48tt-scatalyst_3560c-8pc-scatalyst_2960xr-48fps-lcatalyst_2960s-f24ps-lcatalyst_3560v2-48tscatalyst_2960g-24tc-lcatalyst_2960-plus_24pc-sie-4000-4t4p4g-e_industrial_ethernet_switchcatalyst_2960-24lt-lcatalyst_3750-24pscatalyst_3560x-24u-ecatalyst_3750x-48t-lenhanced_layer_2\/3_etherswitch_service_modulecatalyst_2350-48td-sdcatalyst_2960l-24ts-llie-4000-8gt4g-e_industrial_ethernet_switchie_2000-16tc_industrial_ethernet_switchcatalyst_2960s-24ps-lcatalyst_blade_switch_3020catalyst_2960g-48tc-lsm-x_layer_2\/3_etherswitch_service_modulecatalyst_3750x-24s-ecatalyst_4928_10_gigabit_ethernet_switchcatalyst_4948_10_gigabit_ethernet_switchie_2000-8tc-g-e_industrial_ethernet_switchcatalyst_3750x-48u-scatalyst_3560e-48pd-efcatalyst_3560e-24pd-scatalyst_2960-8tc-lcatalyst_2960-24pc-lcatalyst_2970g-24tembedded_service_2020_24tc_concatalyst_2960cg-8tc-lie-4010-16s12p_industrial_ethernet_switchie-4000-16gt4g-e_industrial_ethernet_switchcatalyst_2960xr-24ps-icatalyst_blade_switch_3120xcatalyst_3750x-48p-sie_2000-16ptc-g_industrial_ethernet_switchcatalyst_3560x-24t-lie-3010-16s-8pc_industrial_ethernet_switchcatalyst_2960-plus_48pst-scatalyst_2960-plus_24lc-sembedded_service_2020_con_bcatalyst_3560x-48t-scatalyst_3560x-24t-ecatalyst_2960s-f48ts-sie-4000-4tc4g-e_industrial_ethernet_switchembedded_service_2020_concatalyst_4500_supervisor_engine_6-ecatalyst_switch_module_3110catalyst_3560e-12d-scatalyst_3550_48_smicatalyst_3560-24pscatalyst_3560x-48u-ecatalyst_2960x-48lps-lcatalyst_2960-48tc-lcatalyst_3750x-48p-eie-4000-8gs4g-e_industrial_ethernet_switchcatalyst_2960s-24pd-lcatalyst_3560x-24p-scatalyst_blade_switch_3030catalyst_switch_module_3110xcatalyst_2960s-24ts-lcatalyst_3560cpd-8pt-scatalyst_3750g-16tdcatalyst_2918-24tc-ccatalyst_3560g-48tsie_3000-4tc_industrial_ethernet_switchcatalyst_2960-plus_24lc-lie-4000-4gc4gp4g-e_industrial_ethernet_switchie_3000-8tc_industrial_ethernet_switchcatalyst_3750e-48td-ecatalyst_3750x-48u-lcatalyst_3560e-48pd-sie_2000-16tc-g_industrial_ethernet_switchcatalyst_3750v2-24fsie_2000-4s-ts-g_industrial_ethernet_switchcatalyst_2960cx-8pc-lcatalyst_4948catalyst_3560-8pccatalyst_3560cx-12tc-scatalyst_3560e-48pd-eie-5000-16s12p_industrial_ethernet_switchcatalyst_3750x-24p-scatalyst_2960-24pc-scatalyst_3750x-48p-lcatalyst_3750x-24p-lcatalyst_2960c-8pc-lcatalyst_3750_metro_24-accatalyst_2960xr-48lps-lgigabit_ethernet_switch_module_\(cgesm\)catalyst_2960xr-48lpd-lcatalyst_2960s-f48fps-lcatalyst_3560x-48p-ecatalyst_2960x-48ts-lcatalyst_2960xr-48fps-icatalyst_3550_24_emicatalyst_3560e-24pd-eios_xecatalyst_4500_supervisor_engine_ii-plus-tsie_2000-8tc-g-n_industrial_ethernet_switchcatalyst_3750x-48pf-lie_2000-16tc-g-x_industrial_ethernet_switchcatalyst_2960x-24psq-lcatalyst_2960xr-24td-icatalyst_3560e-24td-ecatalyst_2960xr-48lpd-icatalyst_3750v2-48pscatalyst_2918-24tt-ccatalyst_3550_12tcatalyst_2960-48pst-sie-4000-4gs8gp4g-e_industrial_ethernet_switchcatalyst_3560-48tscatalyst_c2928-24lt-ccatalyst_3550_48_emicatalyst_3750g-24pscatalyst_2960-24tt-lcatalyst_2960l-8ts-llcatalyst_3750x-48pf-ecatalyst_3560x-48p-lcatalyst_3560e-12sd-eembedded_service_2020_ncpcatalyst_4500_supervisor_engine_v-10gecatalyst_3750_metro_24-dccatalyst_3560x-48pf-lcatalyst_2960cpd-8pt-lcatalyst_2960xr-48ts-icatalyst_2960l-24ps-llcatalyst_2960x-24ts-lcatalyst_4900mcatalyst_2960xr-24td-lcatalyst_3750e-48pd-scatalyst_2960xr-48fpd-lcatalyst_3560cx-8tc-scatalyst_3750-48pscatalyst_3560e-12sd-scatalyst_3560cx-12pd-sembedded_service_2020_24tc_ncp_bcatalyst_2960-48tt-lcatalyst_2960s-24td-lcatalyst_2960x-24ps-lcatalyst_2960xr-48ts-lcatalyst_3750x-48t-ecatalyst_2960-plus_24tc-lcatalyst_2960-plus_48tc-lcatalyst_3560e-24td-scatalyst_3560v2-24tsie_2000-4ts_industrial_ethernet_switchcatalyst_4000_supervisor_engine_vcatalyst_2960x-24pd-lcatalyst_3560cg-8pc-scatalyst_2960-24tc-lcatalyst_3560x-24p-eie-4000-8s4g-e_industrial_ethernet_switchcatalyst_2960-8tc-scatalyst_3750x-24u-lcatalyst_4500_supervisor_ii-plus-10gecatalyst_2928-24tc-ccatalyst_3560v2-48pscatalyst_2960xr-24pd-icatalyst_3750e-24td-scatalyst_4948e-f_ethernet_switchcatalyst_3560-12pc-scatalyst_2960s-48fps-lcatalyst_2975catalyst_3750x-24p-ecatalyst_3750-48tscatalyst_2960x-48td-lembedded_service_2020_24tc_ncpie_2000-24t67_industrial_ethernet_switchcatalyst_2960x-24ts-llcatalyst_3750x-24u-scatalyst_3550_24_fx_smicatalyst_3750e-24pd-ecatalyst_2970g-24tscatalyst_3750x-12s-ecatalyst_4500_supervisor_engine_ii-pluscatalyst_3560-24tscatalyst_3750-24fscatalyst_3560g-24tscatalyst_blade_switch_3040me_4924-10gecatalyst_2960-plus_24tc-scatalyst_3750g-48tsie-4000-16t4g-e_industrial_ethernet_switchcatalyst_2960xr-48td-lcatalyst_3560e-12d-ecatalyst_3560x-48pf-ecatalyst_2960s-f24ts-scatalyst_3750g-12scatalyst_3560-48psie-5000-12s12p-10g_industrial_ethernet_switchcatalyst_3750-24tscatalyst_3750e-48pd-ecatalyst_3750e-48td-sie_2000-8tc_industrial_ethernet_switchcatalyst_4000_supervisor_engine_icatalyst_3750g-24tie_2000-16t67_industrial_ethernet_switchie-4000-4s8p4g-e_industrial_ethernet_switchcatalyst_4500_supervisor_engine_vie-4000-8gt8gp4g-e_industrial_ethernet_switchcatalyst_2960-plus_48tc-scatalyst_3750x-24t-scatalyst_blade_switch_3032catalyst_2960s-f48lps-lembedded_service_2020_ncp_bcatalyst_2960xr-48fpd-icatalyst_3560x-48p-scatalyst_3750e-24pd-scatalyst_3560x-48u-lcatalyst_3560x-48t-ecatalyst_2918-48tt-ccatalyst_3560cx-8xpd-scatalyst_3750g-12s-sdcatalyst_2960x-48lpd-lcatalyst_3550_24_smicatalyst_2960-24tc-scatalyst_3560x-24u-scatalyst_3750e-48pd-sfcatalyst_3750v2-24pscatalyst_3750v2-24tscatalyst_3560g-48psrf_gateway_10catalyst_2960c-8tc-lie-4000-8t4g-e_industrial_ethernet_switchcatalyst_2960cpd-8tt-lcatalyst_2960s-24ts-sie_2000-8tc-g_industrial_ethernet_switchcatalyst_3560cx-8pc-scatalyst_2960-48tc-scatalyst_3750e-24td-eie-3010-24tc_industrial_ethernet_switchcatalyst_3560e-48td-sie-4010-4s24p_industrial_ethernet_switchcatalyst_3560x-48t-lcatalyst_2960x-24td-lcatalyst_switch_module_3012catalyst_2960c-12pc-lcatalyst_3750x-24t-lcatalyst_2960x-48fps-lcatalyst_3750e-48pd-efie_2000-8t67_industrial_ethernet_switchcatalyst_2960s-48fpd-lie_2000-16tc-g-n_industrial_ethernet_switchcatalyst_2960l-48ts-llcatalyst_2960pd-8tt-lcatalyst_3750g-48pscatalyst_2960cx-8tc-lcatalyst_2960s-f48ts-lcatalyst_3560cx-12pc-scatalyst_3750x-24s-scatalyst_3560cg-8tc-scatalyst_2960l-16ps-llie_2000-16t67p_industrial_ethernet_switchcatalyst_2350-48td-scatalyst_blade_switch_3120ie_2000-8t67p_industrial_ethernet_switchcatalyst_3750x-48pf-scatalyst_3560cx-8pt-scatalyst_2960s-48td-lcatalyst_3750x-24t-ecatalyst_2960g-8tc-lembedded_service_2020_24tc_con_bcatalyst_3750x-48u-ecatalyst_3750g-24ts-1ucatalyst_3550_12gcatalyst_2960s-f24ts-lcatalyst_3550_24_dc_smicatalyst_2960xr-24ts-icatalyst_3560x-24p-lcatalyst_3750v2-48tscatalyst_3750x-48t-scatalyst_2918-48tc-ccatalyst_4000_supervisor_engine_ivcatalyst_2960l-8ps-llcatalyst_2960xr-24ps-lcatalyst_2960s-48ts-lcatalyst_3560e-48td-eCisco IOS and IOS XE SoftwareIOS and IOS XE
CWE ID-CWE-20
Improper Input Validation
CVE-2017-3834
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-4.46% / 90.44%
||
7 Day CHG~0.00%
Published-06 Apr, 2017 | 18:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated, remote attacker to take complete control of an affected device. The vulnerability is due to the existence of default credentials for an affected device that is running Cisco Mobility Express Software, regardless of whether the device is configured as a master, subordinate, or standalone access point. An attacker who has layer 3 connectivity to an affected device could use Secure Shell (SSH) to log in to the device with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points that are running an 8.2.x release of Cisco Mobility Express Software prior to Release 8.2.111.0, regardless of whether the device is configured as a master, subordinate, or standalone access point. Release 8.2 was the first release of Cisco Mobility Express Software for next generation Cisco Aironet Access Points. Cisco Bug IDs: CSCva50691.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-aironet_1850e_access_pointaironet_access_point_firmwareaironet_1850i_access_pointaironet_1830i_access_pointCisco Aironet 1830 Series and 1850 Series Access Points
CWE ID-CWE-1188
Initialization of a Resource with an Insecure Default
CWE ID-CWE-255
Not Available
CVE-2018-0125
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-55.19% / 98.93%
||
7 Day CHG~0.00%
Published-08 Feb, 2018 | 07:00
Updated-14 Jan, 2026 | 19:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-04-15||Apply updates per vendor instructions.

A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to an incomplete input validation on user-controlled input in an HTTP request to the targeted device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to execute arbitrary code as the root user and gain full control of the affected system or cause it to reload, resulting in a DoS condition. This vulnerability is fixed in firmware version 1.0.1.11 for the following Cisco products: RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router. Cisco Bug IDs: CSCvg92737, CSCvh60170.

Action-Not Available
Vendor-n/aCisco Systems, Inc.
Product-rv134wrv132wrv132w_firmwarerv134w_firmwareCisco RV132W and RV134WVPN Routers
CWE ID-CWE-20
Improper Input Validation
CVE-2018-0448
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-2.14% / 80.12%
||
7 Day CHG~0.00%
Published-05 Oct, 2018 | 14:00
Updated-26 Nov, 2024 | 14:41
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Digital Network Architecture Center Authentication Bypass Vulnerability

A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and take complete control of identity management functions. The vulnerability is due to insufficient security restrictions for critical management functions. An attacker could exploit this vulnerability by sending a valid identity management request to the affected system. An exploit could allow the attacker to view and make unauthorized modifications to existing system users as well as create new users.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-digital_network_architecture_centerCisco Digital Network Architecture Center (DNA Center)
CWE ID-CWE-326
Inadequate Encryption Strength
CVE-2022-22965
Matching Score-8
Assigner-VMware by Broadcom
ShareView Details
Matching Score-8
Assigner-VMware by Broadcom
CVSS Score-9.8||CRITICAL
EPSS-99.68% / 99.95%
||
7 Day CHG~0.00%
Published-01 Apr, 2022 | 22:17
Updated-30 Oct, 2025 | 19:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-04-25||Apply updates per vendor instructions.

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.

Action-Not Available
Vendor-n/aCisco Systems, Inc.Oracle CorporationSiemens AGVeritas Technologies LLCVMware (Broadcom Inc.)
Product-sd-wan_edgecx_cloud_agentretail_xstore_point_of_servicesipass_integratedoperation_schedulerretail_integration_busretail_customer_management_and_segmentation_foundationcommunications_cloud_native_core_binding_support_functionnetbackup_virtual_appliancecommunications_cloud_native_core_policycommunications_cloud_native_core_network_slice_selection_functioncommunications_cloud_native_core_network_function_cloud_native_environmentfinancial_services_analytical_applications_infrastructurecommunications_cloud_native_core_network_exposure_functionsinec_network_management_systemweblogic_serverretail_bulk_data_integrationnetbackup_flex_scale_appliancesiveillance_identitynetbackup_appliancecommerce_platformsimatic_speech_assistant_for_machinesfinancial_services_behavior_detection_platformcommunications_cloud_native_core_automated_test_suiteretail_merchandising_systemcommunications_policy_managementfinancial_services_enterprise_case_managementretail_financial_integrationflex_appliancemysql_enterprise_monitorcommunications_cloud_native_core_network_repository_functioncommunications_cloud_native_core_unified_data_repositoryjdkcommunications_unified_inventory_managementaccess_appliancecommunications_cloud_native_core_security_edge_protection_proxyspring_frameworkcommunications_cloud_native_core_consoleproduct_lifecycle_analyticsSpring FrameworkSpring Framework
CWE ID-CWE-94
Improper Control of Generation of Code ('Code Injection')
CVE-2022-20749
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-4.01% / 89.48%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:32
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340_firmwarerv340wrv345prv345rv345_firmwarerv345p_firmwarerv340rv340w_firmwareCisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20842
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9||CRITICAL
EPSS-1.64% / 73.89%
||
7 Day CHG~0.00%
Published-10 Aug, 2022 | 08:10
Updated-01 Nov, 2024 | 18:55
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340_firmwarerv340wrv345prv345rv345_firmwarerv345p_firmwarerv340rv340w_firmwareCisco Small Business RV Series Router Firmware
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE ID-CWE-20
Improper Input Validation
CVE-2022-20712
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-3.03% / 86.10%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:32
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340_firmwarerv340wrv345prv345rv345_firmwarerv345p_firmwarerv340rv340w_firmwareCisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20710
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-2.43% / 82.52%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:31
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340_firmwarerv340wrv345prv345rv345_firmwarerv345p_firmwarerv340rv340w_firmwareCisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20708
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-14.86% / 96.34%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-28 Oct, 2025 | 13:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-03-17||Apply updates per vendor instructions.
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340w_firmwarerv340wrv340_firmwarerv345p_firmwarerv340rv345rv345_firmwarerv345pCisco Small Business RV Series Router FirmwareSmall Business RV160, RV260, RV340, and RV345 Series Routers
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20706
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-5.57% / 92.04%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:31
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv260_firmwarerv340_firmwarerv345prv345rv160w_firmwarerv345p_firmwarerv160_firmwarerv260w_firmwarerv340w_firmwarerv160wrv260rv260wrv340wrv260prv345_firmwarerv340rv260p_firmwarerv160Cisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20707
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-75.32% / 99.46%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:31
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340_firmwarerv340wrv345prv345rv345_firmwarerv345p_firmwarerv340rv340w_firmwareCisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20703
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-9.20% / 94.80%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-28 Oct, 2025 | 13:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-03-17||Apply updates per vendor instructions.
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340w_firmwarerv260rv160rv160wrv160w_firmwarerv345_firmwarerv345prv260prv160_firmwarerv260w_firmwarerv260wrv260p_firmwarerv340wrv340_firmwarerv345p_firmwarerv340rv260_firmwarerv345Cisco Small Business RV Series Router FirmwareSmall Business RV160, RV260, RV340, and RV345 Series Routers
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-295
Improper Certificate Validation
CVE-2022-20699
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-72.46% / 99.38%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-28 Oct, 2025 | 13:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-03-17||Apply updates per vendor instructions.
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340w_firmwarerv340wrv340_firmwarerv345p_firmwarerv340rv345rv345_firmwarerv345pCisco Small Business RV Series Router FirmwareSmall Business RV160, RV260, RV340, and RV345 Series Routers
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-1284
Improper Validation of Specified Quantity in Input
CVE-2022-20861
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-0.57% / 43.73%
||
7 Day CHG~0.00%
Published-21 Jul, 2022 | 03:45
Updated-01 Nov, 2024 | 18:59
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Nexus Dashboard Unauthorized Access Vulnerabilities

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-nexus_dashboardCisco Nexus Dashboard
CWE ID-CWE-306
Missing Authentication for Critical Function
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2022-20704
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-2.30% / 81.47%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:31
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv260_firmwarerv340_firmwarerv345prv345rv160w_firmwarerv345p_firmwarerv160_firmwarerv260w_firmwarerv340w_firmwarerv160wrv260rv260wrv340wrv260prv345_firmwarerv340rv260p_firmwarerv160Cisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20857
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9.8||CRITICAL
EPSS-1.51% / 71.85%
||
7 Day CHG~0.00%
Published-21 Jul, 2022 | 03:45
Updated-01 Nov, 2024 | 18:59
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Nexus Dashboard Unauthorized Access Vulnerabilities

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-nexus_dashboardCisco Nexus Dashboard
CWE ID-CWE-306
Missing Authentication for Critical Function
CVE-2022-20705
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-80.03% / 99.58%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:31
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv260_firmwarerv340_firmwarerv345prv345rv160w_firmwarerv345p_firmwarerv160_firmwarerv260w_firmwarerv340w_firmwarerv160wrv260rv260wrv340wrv260prv345_firmwarerv340rv260p_firmwarerv160Cisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20827
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-9||CRITICAL
EPSS-1.70% / 74.78%
||
7 Day CHG~0.00%
Published-10 Aug, 2022 | 08:12
Updated-01 Nov, 2024 | 18:54
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv260_firmwarerv340_firmwarerv345prv345rv160w_firmwarerv160_firmwarerv260w_firmwarerv345p_firmwarerv340w_firmwarerv160wrv260rv260wrv340wrv260prv345_firmwarerv340rv260p_firmwarerv160Cisco Small Business RV Series Router Firmware
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20701
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-9.75% / 95.02%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-28 Oct, 2025 | 13:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-03-17||Apply updates per vendor instructions.
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340w_firmwarerv340wrv340_firmwarerv345p_firmwarerv340rv345rv345_firmwarerv345pCisco Small Business RV Series Router FirmwareSmall Business RV160, RV260, RV340, and RV345 Series Routers
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-20711
Matching Score-8
Assigner-Cisco Systems, Inc.
ShareView Details
Matching Score-8
Assigner-Cisco Systems, Inc.
CVSS Score-10||CRITICAL
EPSS-4.92% / 91.20%
||
7 Day CHG~0.00%
Published-10 Feb, 2022 | 17:06
Updated-06 Nov, 2024 | 16:31
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Cisco Small Business RV Series Routers Vulnerabilities

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Action-Not Available
Vendor-Cisco Systems, Inc.
Product-rv340_firmwarerv340wrv345prv345rv345_firmwarerv345p_firmwarerv340rv340w_firmwareCisco Small Business RV Series Router Firmware
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
  • Previous
  • 1
  • 2
  • 3
  • 4
  • ...
  • 22
  • 23
  • Next
Details not found