cisco security advisories
60 threat alerts tracking vulnerabilities and security advisories that affect cisco products.
Vulnios monitors cisco CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent cisco security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2021-1142 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1142Critical Vulnerability: CVE-2021-1139 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1139Critical Vulnerability: CVE-2021-1141 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1141Critical Vulnerability: CVE-2021-1300 — cisco — ios_xe_sd-wan, sd-wan_firmware
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see t
criticalCVE-2021-1300Critical Vulnerability: CVE-2021-1301 — cisco — ios_xe_sd-wan, sd-wan_firmware
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see t
criticalCVE-2021-1301Critical Vulnerability: CVE-2021-1138 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1138Critical Vulnerability: CVE-2021-1264 — cisco — catalyst_center
A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input valid
criticalCVE-2021-1264Critical Vulnerability: CVE-2021-1140 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1140Critical Vulnerability: CVE-2021-1225 — cisco — sd-wan_vmanage
Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system.
criticalCVE-2021-1225Critical Vulnerability: CVE-2020-26085 — cisco — jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-26085Critical Vulnerability: CVE-2020-27134 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27134Critical Vulnerability: CVE-2020-27132 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27132Critical Vulnerability: CVE-2020-27133 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27133Critical Vulnerability: CVE-2020-27127 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27127Critical Vulnerability: CVE-2020-3586 — cisco — dna_spaces\
A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerabili
criticalCVE-2020-3586Critical Vulnerability: CVE-2020-3470 — cisco — enterprise_nfv_infrastructure_software, enterprise_network_compute_system_5100
Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulner
criticalCVE-2020-3470Critical Vulnerability: CVE-2020-3531 — cisco — iot_field_network_director
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exist
criticalCVE-2020-3531Critical Vulnerability: CVE-2020-27130 — cisco — security_manager
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversa
criticalCVE-2020-27130Critical Vulnerability: CVE-2020-3284 — cisco — a9k-rsp880-se_firmware, ios_xr
A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE
criticalCVE-2020-3284Critical Vulnerability: CVE-2019-16028 — cisco — secure_firewall_management_center
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions
criticalCVE-2019-16028Critical Vulnerability: CVE-2020-3495 — cisco — jabber
A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker co
criticalCVE-2020-3495Critical Vulnerability: CVE-2020-3446 — cisco — encs_5406-w_firmware, encs_5406-w
A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Software (NFVIS)-bundled images for Cisco ENCS 5400-W Series and CSP 5000-W Series appl
criticalCVE-2020-3446Critical Vulnerability: CVE-2020-16137 — cisco — unified_ip_conference_station_7937g_firmware, unified_ip_conference_station_7937g
A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Note
criticalCVE-2020-16137Critical Vulnerability: CVE-2020-3382 — cisco — data_center_network_manager
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative p
criticalCVE-2020-3382Critical Vulnerability: CVE-2020-3375 — cisco — sd-wan, ios_xe_sd-wan
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input valid
criticalCVE-2020-3375Critical Vulnerability: CVE-2020-3374 — cisco — sd-wan
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive informat
criticalCVE-2020-3374Critical Vulnerability: CVE-2020-3323 — cisco — rv110w_wireless-n_vpn_firewall_firmware, rv110w_wireless-n_vpn_firewall
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an
criticalCVE-2020-3323Critical Vulnerability: CVE-2020-3330 — cisco — rv110w_wireless-n_vpn_firewall_firmware, rv110w_wireless-n_vpn_firewall
A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-priv
criticalCVE-2020-3330Critical Vulnerability: CVE-2020-3357 — cisco — rv340_dual_wan_gigabit_vpn_router_firmware, rv340_dual_wan_gigabit_vpn_router
A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to e
criticalCVE-2020-3357Critical Vulnerability: CVE-2020-3144 — cisco — rv110w_firmware, rv110w
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could
criticalCVE-2020-3144Critical Vulnerability: CVE-2020-3140 — cisco — prime_license_manager
A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vul
criticalCVE-2020-3140Critical Vulnerability: CVE-2020-3331 — cisco — rv110w_wireless-n_vpn_firewall_firmware, rv110w_wireless-n_vpn_firewall
A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrar
criticalCVE-2020-3331Critical Vulnerability: CVE-2020-3297 — cisco — sg250x-24_firmware, sg250x-24
A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protection
criticalCVE-2020-3297Critical Vulnerability: CVE-2020-3198 — cisco — ios, 1120
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unau
criticalCVE-2020-3198Critical Vulnerability: CVE-2020-3258 — cisco — ios, 1120
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unau
criticalCVE-2020-3258Critical Vulnerability: CVE-2020-3227 — cisco — ios_xe
A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API com
criticalCVE-2020-3227Critical Vulnerability: CVE-2020-3280 — cisco — unified_contact_center_express
A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary code on an affected d
criticalCVE-2020-3280Critical Vulnerability: CVE-2020-3318 — cisco — secure_firewall_management_center
Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a hig
criticalCVE-2020-3318Critical Vulnerability: CVE-2020-3187 — cisco — firepower_threat_defense, asa_5505_firmware
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to c
criticalCVE-2020-3187Critical Vulnerability: CVE-2020-3125 — cisco — asa_5505_firmware, asa_5505
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution
criticalCVE-2020-3125Critical Vulnerability: CVE-2020-3243 — cisco — ucs_director, ucs_director_express_for_big_data
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks o
criticalCVE-2020-3243Critical Vulnerability: CVE-2020-3247 — cisco — ucs_director, ucs_director_express_for_big_data
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks o
criticalCVE-2020-3247Critical Vulnerability: CVE-2020-3250 — cisco — ucs_director, ucs_director_express_for_big_data
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks o
criticalCVE-2020-3250Critical Vulnerability: CVE-2020-3248 — cisco — ucs_director, ucs_director_express_for_big_data
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks o
criticalCVE-2020-3248Critical Vulnerability: CVE-2020-3158 — cisco — smart_software_manager_on-prem
A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privi
criticalCVE-2020-3158Critical Vulnerability: CVE-2019-16029 — cisco — smart_software_manager_on-prem
A vulnerability in the application programming interface (API) of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prev
criticalCVE-2019-16029Critical Vulnerability: CVE-2019-15976 — cisco — data_center_network_manager
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary act
criticalCVE-2019-15976Critical Vulnerability: CVE-2019-15975 — cisco — data_center_network_manager
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary act
criticalCVE-2019-15975Critical Vulnerability: CVE-2019-15958 — cisco — prime_infrastructure, evolved_programmable_network_manager
A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with r
criticalCVE-2019-15958Critical Vulnerability: CVE-2019-15260 — cisco — aironet_1540_firmware, aironet_1540
A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerabili
criticalCVE-2019-15260Critical Vulnerability: CVE-2019-12630 — cisco — security_manager
A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerabili
criticalCVE-2019-12630Critical Vulnerability: CVE-2019-1976 — cisco — industrial_network_director, network_level_service
A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an a
criticalCVE-2019-1976Critical Vulnerability: CVE-2019-12643 — cisco — ios_xe, 4221_integrated_services_router
A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. T
criticalCVE-2019-12643Critical Vulnerability: CVE-2019-1937 — cisco — integrated_management_controller_supervisor, ucs_director
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthe
criticalCVE-2019-1937Critical Vulnerability: CVE-2019-1938 — cisco — ucs_director, ucs_director_express_for_big_data
A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass authentication and exe
criticalCVE-2019-1938Critical Vulnerability: CVE-2019-1935 — cisco — integrated_management_controller_supervisor, ucs_director
A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to
criticalCVE-2019-1935Critical Vulnerability: CVE-2019-1974 — cisco — integrated_management_controller_supervisor, ucs_director
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthe
criticalCVE-2019-1974Critical Vulnerability: CVE-2019-1895 — cisco — enterprise_network_function_virtualization_infrastructure
A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC
criticalCVE-2019-1895Critical Vulnerability: CVE-2019-1971 — cisco — enterprise_network_function_virtualization_infrastructure
A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary co
criticalCVE-2019-1971Critical Vulnerability: CVE-2019-1913 — cisco — sf-220-24_firmware, sf-220-24
Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the e
criticalCVE-2019-1913
Showing the 60 most recent. Older alerts are archived but still reachable via search and the main feed.
Track cisco exposure across your environment
Vulnios automatically cross-references your asset inventory against new cisco CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan