Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2729▼ 513 respecto a la semana anterior
Críticas / altas1298▼ 212 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior
610 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.6) | 1.5% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of… | |
| Modificada | Media (6.8) | 0.53% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers could allow an unauthenticated, remote attacker to disconnect legitimate IPsec VPN sessions to an affected device. The vulnerability is due to… | |
| Modificada | Alta (8.8) | 3.3% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of user-supplied input to the web… | |
| Modificada | Alta (7.2) | 4.9% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges on the underlying Linux shell. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this… | |
| Modificada | Alta (8.8) | 1.1% | — | Cisco IOSCisco IOS XECisco IOS XRCisco Nx-os | 3/6/2020 | 17/6/2026 | A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected… | |
| Modificada | Media (6.8) | 0.43% | — | Cisco IOS XE Sd-wan | 3/6/2020 | 17/6/2026 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for certain commands. An… | |
| Modificada | Media (6.7) | 0.35% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual appliance (OVA). An attacker could exploit this vulnerability… | |
| Modificada | Media (6.7) | 0.35% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could allow an attacker to load malicious software onto an affected… | |
| Modificada | Media (6.7) | 0.43% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to those of the root user of the underlying operating system. The vulnerability is due to the ROMMON allowing for special parameters to be passed to the device at initial boot up. An attacker could… | |
| Modificada | Alta (7.2) | 2.6% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by… | |
| Modificada | Alta (7.2) | 3.5% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker who has valid administrative access to… | |
| Modificada | Media (6.8) | 0.28% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the area of code that manages the verification of… | |
| Modificada | Media (6.7) | 0.61% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system (OS) to conduct a command injection attack during device boot. This vulnerability is due to insufficient input validation… | |
| Modificada | Media (4.7) | 0.47% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the handling of IEEE 802.11w Protected Management Frames (PMFs) of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerability exists because the… | |
| Modificada | Media (6.7) | 0.38% | — | Cisco IOSCisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to execute arbitrary code on the underlying operating system (OS) with root privileges. The vulnerability is due to insufficient… | |
| Modificada | Alta (8.6) | 0.84% | — | Cisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a denial of service (DoS) condition. The vulnerability is… | |
| Modificada | Media (6) | 0.31% | — | Cisco IOSCisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient input validation of… | |
| Modificada | Alta (7.7) | 1.7% | — | Cisco IOSCisco IOS XE | 3/6/2020 | 17/6/2026 | A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected… | |
| Modificada | Alta (7.8) | 0.39% | — | Cisco IOS XE | 29/4/2020 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and… | |
| Modificada | Alta (8.4) | 0.33% | — | Cisco IOS XE | 19/2/2020 | 17/6/2026 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to an affected device… | |
| Modificada | Alta (7.8) | 0.35% | — | Cisco IOS XE | 25/9/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute commands on the underlying operating system (OS). The vulnerability is due to insufficient enforcement of the consent token in authorizing shell access. An attacker… | |
| Modificada | Media (4.8) | 0.80% | — | Cisco IOSCisco IOS XE | 25/9/2019 | 17/6/2026 | A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected software using the banner parameter. The vulnerability is due to insufficient input… | |
| Modificada | Media (4.8) | 0.80% | — | Cisco IOS XE | 25/9/2019 | 17/6/2026 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameters that are… | |
| Modificada | Media (6.7) | 1.1% | — | Cisco IOS XE | 25/9/2019 | 17/6/2026 | A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux operating system of Cisco IOS XE Software. The vulnerability is due to incomplete validation of certain commands. An attacker could exploit this vulnerability by… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco IOS XE | 25/9/2019 | 17/6/2026 | A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers (ISRs) could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The vulnerability is due to… |