Ausgenutzte Schwachstellen

Cisco

102 Schwachstellen von Cisco im KEV-Katalog der CISA: jene, für die die US-Behörde für Cybersicherheit Belege für eine Ausnutzung in echten Angriffen hat.

Im Katalog102
Letzte 12 Monate21
In Ransomware-Kampagnen7
Zuletzt aufgenommen29. Oktober 2026

Die Schwachstellen102

  1. 29. Oktober 2026CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
  2. 14. Oktober 2026CVE-2026-76519Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
  3. 30. September 2026CVE-2026-76504Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
  4. 16. September 2026CVE-2026-76460Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
  5. 14. September 2026CVE-2026-76461Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
  6. 9. September 2026CVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
  7. 11. August 2026CVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
  8. 29. Juli 2026CVE-2026-20316Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRansomware
  9. 13. Juli 2026CVE-2008-4128IOSCisco IOS Cross-Site Request Forgery Vulnerability
  10. 25. Juni 2026CVE-2026-20230Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
  11. 15. Juni 2026CVE-2026-20262Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
  12. 9. Juni 2026CVE-2026-20245Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
  13. 14. Mai 2026CVE-2026-20182Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
  14. 20. April 2026CVE-2026-20133Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
  15. 20. April 2026CVE-2026-20128Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
  16. 20. April 2026CVE-2026-20122Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
  17. 19. März 2026CVE-2026-20131Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRansomware
  18. 25. Februar 2026CVE-2026-20127Catalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
  19. 25. Februar 2026CVE-2022-20775SD-WANCisco SD-WAN Path Traversal Vulnerability
  20. 21. Januar 2026CVE-2026-20045Unified Communications ManagerCisco Unified Communications Products Code Injection Vulnerability
  21. 17. Dezember 2025CVE-2025-20393Multiple ProductsCisco Multiple Products Improper Input Validation Vulnerability
  22. 29. September 2025CVE-2025-20352IOS and IOS XECisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
  23. 25. September 2025CVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
  24. 25. September 2025CVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
  25. 28. Juli 2025CVE-2025-20337Identity Services EngineCisco Identity Services Engine Injection Vulnerability
  26. 28. Juli 2025CVE-2025-20281Identity Services EngineCisco Identity Services Engine Injection Vulnerability
  27. 31. März 2025CVE-2024-20439Smart Licensing UtilityCisco Smart Licensing Utility Static Credential Vulnerability
  28. 3. März 2025CVE-2023-20118Small Business RV Series RoutersCisco Small Business RV Series Routers Command Injection Vulnerability
  29. 12. November 2024CVE-2014-2120Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
  30. 24. Oktober 2024CVE-2024-20481Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial-of-Service Vulnerability
  31. 2. Juli 2024CVE-2024-20399NX-OSCisco NX-OS Command Injection Vulnerability
  32. 24. April 2024CVE-2024-20359Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Privilege Escalation Vulnerability
  33. 24. April 2024CVE-2024-20353Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial of Service Vulnerability
  34. 15. Februar 2024CVE-2020-3259Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure VulnerabilityRansomware
  35. 23. Oktober 2023CVE-2023-20273Cisco IOS XE Web UICisco IOS XE Web UI Command Injection Vulnerability
  36. 16. Oktober 2023CVE-2023-20198IOS XE Web UICisco IOS XE Web UI Privilege Escalation Vulnerability
  37. 10. Oktober 2023CVE-2023-20109IOS and IOS XECisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
  38. 13. September 2023CVE-2023-20269Adaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityRansomware
  39. 19. Mai 2023CVE-2016-6415IOS, IOS XR, and IOS XECisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
  40. 19. Mai 2023CVE-2004-1464IOSCisco IOS Denial-of-Service Vulnerability
  41. 19. April 2023CVE-2017-6742IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  42. 24. Oktober 2022CVE-2020-3433AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRansomware
  43. 24. Oktober 2022CVE-2020-3153AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRansomware
  44. 8. Juni 2022CVE-2019-15271RV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data Vulnerability
  45. 24. Mai 2022CVE-2016-6367Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
  46. 24. Mai 2022CVE-2016-6366Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
  47. 23. Mai 2022CVE-2022-20821IOS XRCisco IOS XR Open Port Vulnerability
  48. 25. März 2022CVE-2018-0147Secure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization Vulnerability
  49. 25. März 2022CVE-2018-0125VPN RoutersCisco VPN Routers Remote Code Execution Vulnerability
  50. 25. März 2022CVE-2017-3881IOS and IOS XECisco IOS and IOS XE Remote Code Execution Vulnerability
  51. 25. März 2022CVE-2015-0666Prime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
  52. 25. März 2022CVE-2010-3035IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
  53. 25. März 2022CVE-2009-2055IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
  54. 3. März 2022CVE-2022-20708Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  55. 3. März 2022CVE-2022-20703Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  56. 3. März 2022CVE-2022-20701Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  57. 3. März 2022CVE-2022-20700Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  58. 3. März 2022CVE-2022-20699Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  59. 3. März 2022CVE-2019-1652Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersCisco Small Business Routers Improper Input Validation Vulnerability
  60. 3. März 2022CVE-2018-0180IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
  61. 3. März 2022CVE-2018-0179IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
  62. 3. März 2022CVE-2018-0175IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
  63. 3. März 2022CVE-2018-0174IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
  64. 3. März 2022CVE-2018-0173IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
  65. 3. März 2022CVE-2018-0172IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
  66. 3. März 2022CVE-2018-0167IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
  67. 3. März 2022CVE-2018-0161IOS SoftwareCisco IOS Software Resource Management Errors Vulnerability
  68. 3. März 2022CVE-2018-0159IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
  69. 3. März 2022CVE-2018-0158IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
  70. 3. März 2022CVE-2018-0156IOS Software and Cisco IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
  71. 3. März 2022CVE-2018-0155Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesCisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
  72. 3. März 2022CVE-2018-0154IOS SoftwareCisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
  73. 3. März 2022CVE-2018-0151IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
  74. 3. März 2022CVE-2017-6744IOS softwareCisco IOS Software SNMP Remote Code Execution Vulnerability
  75. 3. März 2022CVE-2017-6743IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  76. 3. März 2022CVE-2017-6740IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  77. 3. März 2022CVE-2017-6739IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  78. 3. März 2022CVE-2017-6738IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  79. 3. März 2022CVE-2017-6737IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  80. 3. März 2022CVE-2017-6736IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  81. 3. März 2022CVE-2017-6663IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
  82. 3. März 2022CVE-2017-6627IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
  83. 3. März 2022CVE-2017-12319IOS XE SoftwareCisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
  84. 3. März 2022CVE-2017-12240IOS and IOS XE SoftwareCisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
  85. 3. März 2022CVE-2017-12238Catalyst 6800 Series SwitchesCisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
  86. 3. März 2022CVE-2017-12237IOS and IOS XE SoftwareCisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
  87. 3. März 2022CVE-2017-12235IOS softwareCisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
  88. 3. März 2022CVE-2017-12234IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
  89. 3. März 2022CVE-2017-12233IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
  90. 3. März 2022CVE-2017-12232IOS softwareCisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
  91. 3. März 2022CVE-2017-12231IOS softwareCisco IOS Software Network Address Translation Denial-of-Service Vulnerability
  92. 3. November 2021CVE-2021-1498HyperFlex HXCisco HyperFlex HX Data Platform Command Injection Vulnerability
  93. 3. November 2021CVE-2021-1497HyperFlex HXCisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
  94. 3. November 2021CVE-2020-3580Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityRansomware
  95. 3. November 2021CVE-2020-3569IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
  96. 3. November 2021CVE-2020-3566IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
  97. 3. November 2021CVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Read-Only Path Traversal Vulnerability
  98. 3. November 2021CVE-2020-3161Cisco IP PhonesCisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
  99. 3. November 2021CVE-2020-3118IOS XRCisco IOS XR Software Discovery Protocol Format String Vulnerability
  100. 3. November 2021CVE-2019-1653Small Business RV320 and RV325 RoutersCisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
  101. 3. November 2021CVE-2018-0296Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
  102. 3. November 2021CVE-2018-0171IOS and IOS XECisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Daten: Known-Exploited-Vulnerabilities-Katalog (KEV) der CISA, zuletzt ergänzt am 4. November 2026.
Der Katalog enthält nur Schwachstellen mit Belegen für eine Ausnutzung, nicht alle Schwachstellen des Herstellers.

Warnungen nur zu Ihren Produkten

Mit My Defence erhalten Sie Warnungen und Briefings nur zu den Produkten, die Sie einsetzen, auch von Cisco.

Alle HerstellerDer Katalog auf der Website der CISA