Vulnerabilità sfruttate
Cisco
102 vulnerabilità di Cisco nel catalogo KEV della CISA: quelle per cui l'agenzia statunitense per la sicurezza informatica ha prove di sfruttamento in attacchi reali.
Nel catalogo102
Ultimi 12 mesi21
In campagne ransomware7
Ultima aggiunta29 ottobre 2026
Le vulnerabilità102
- 29 ottobre 2026CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- 14 ottobre 2026CVE-2026-76519Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
- 30 settembre 2026CVE-2026-76504Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- 16 settembre 2026CVE-2026-76460Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- 14 settembre 2026CVE-2026-76461Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
- 9 settembre 2026CVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- 11 agosto 2026CVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- 29 luglio 2026CVE-2026-20316Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRansomware
- 13 luglio 2026CVE-2008-4128IOSCisco IOS Cross-Site Request Forgery Vulnerability
- 25 giugno 2026CVE-2026-20230Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- 15 giugno 2026CVE-2026-20262Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- 9 giugno 2026CVE-2026-20245Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
- 14 maggio 2026CVE-2026-20182Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- 20 aprile 2026CVE-2026-20133Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- 20 aprile 2026CVE-2026-20128Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
- 20 aprile 2026CVE-2026-20122Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- 19 marzo 2026CVE-2026-20131Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRansomware
- 25 febbraio 2026CVE-2026-20127Catalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
- 25 febbraio 2026CVE-2022-20775SD-WANCisco SD-WAN Path Traversal Vulnerability
- 21 gennaio 2026CVE-2026-20045Unified Communications ManagerCisco Unified Communications Products Code Injection Vulnerability
- 17 dicembre 2025CVE-2025-20393Multiple ProductsCisco Multiple Products Improper Input Validation Vulnerability
- 29 settembre 2025CVE-2025-20352IOS and IOS XECisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
- 25 settembre 2025CVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
- 25 settembre 2025CVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
- 28 luglio 2025CVE-2025-20337Identity Services EngineCisco Identity Services Engine Injection Vulnerability
- 28 luglio 2025CVE-2025-20281Identity Services EngineCisco Identity Services Engine Injection Vulnerability
- 31 marzo 2025CVE-2024-20439Smart Licensing UtilityCisco Smart Licensing Utility Static Credential Vulnerability
- 3 marzo 2025CVE-2023-20118Small Business RV Series RoutersCisco Small Business RV Series Routers Command Injection Vulnerability
- 12 novembre 2024CVE-2014-2120Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
- 24 ottobre 2024CVE-2024-20481Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial-of-Service Vulnerability
- 2 luglio 2024CVE-2024-20399NX-OSCisco NX-OS Command Injection Vulnerability
- 24 aprile 2024CVE-2024-20359Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Privilege Escalation Vulnerability
- 24 aprile 2024CVE-2024-20353Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial of Service Vulnerability
- 15 febbraio 2024CVE-2020-3259Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure VulnerabilityRansomware
- 23 ottobre 2023CVE-2023-20273Cisco IOS XE Web UICisco IOS XE Web UI Command Injection Vulnerability
- 16 ottobre 2023CVE-2023-20198IOS XE Web UICisco IOS XE Web UI Privilege Escalation Vulnerability
- 10 ottobre 2023CVE-2023-20109IOS and IOS XECisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
- 13 settembre 2023CVE-2023-20269Adaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityRansomware
- 19 maggio 2023CVE-2016-6415IOS, IOS XR, and IOS XECisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
- 19 maggio 2023CVE-2004-1464IOSCisco IOS Denial-of-Service Vulnerability
- 19 aprile 2023CVE-2017-6742IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- 24 ottobre 2022CVE-2020-3433AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRansomware
- 24 ottobre 2022CVE-2020-3153AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRansomware
- 8 giugno 2022CVE-2019-15271RV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data Vulnerability
- 24 maggio 2022CVE-2016-6367Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
- 24 maggio 2022CVE-2016-6366Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
- 23 maggio 2022CVE-2022-20821IOS XRCisco IOS XR Open Port Vulnerability
- 25 marzo 2022CVE-2018-0147Secure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization Vulnerability
- 25 marzo 2022CVE-2018-0125VPN RoutersCisco VPN Routers Remote Code Execution Vulnerability
- 25 marzo 2022CVE-2017-3881IOS and IOS XECisco IOS and IOS XE Remote Code Execution Vulnerability
- 25 marzo 2022CVE-2015-0666Prime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
- 25 marzo 2022CVE-2010-3035IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
- 25 marzo 2022CVE-2009-2055IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2022-20708Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- 3 marzo 2022CVE-2022-20703Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- 3 marzo 2022CVE-2022-20701Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- 3 marzo 2022CVE-2022-20700Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- 3 marzo 2022CVE-2022-20699Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- 3 marzo 2022CVE-2019-1652Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersCisco Small Business Routers Improper Input Validation Vulnerability
- 3 marzo 2022CVE-2018-0180IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2018-0179IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2018-0175IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
- 3 marzo 2022CVE-2018-0174IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
- 3 marzo 2022CVE-2018-0173IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
- 3 marzo 2022CVE-2018-0172IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
- 3 marzo 2022CVE-2018-0167IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
- 3 marzo 2022CVE-2018-0161IOS SoftwareCisco IOS Software Resource Management Errors Vulnerability
- 3 marzo 2022CVE-2018-0159IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2018-0158IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
- 3 marzo 2022CVE-2018-0156IOS Software and Cisco IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2018-0155Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesCisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2018-0154IOS SoftwareCisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2018-0151IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6744IOS softwareCisco IOS Software SNMP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6743IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6740IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6739IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6738IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6737IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6736IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-6663IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-6627IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12319IOS XE SoftwareCisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12240IOS and IOS XE SoftwareCisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2017-12238Catalyst 6800 Series SwitchesCisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12237IOS and IOS XE SoftwareCisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12235IOS softwareCisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12234IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12233IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12232IOS softwareCisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
- 3 marzo 2022CVE-2017-12231IOS softwareCisco IOS Software Network Address Translation Denial-of-Service Vulnerability
- 3 novembre 2021CVE-2021-1498HyperFlex HXCisco HyperFlex HX Data Platform Command Injection Vulnerability
- 3 novembre 2021CVE-2021-1497HyperFlex HXCisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
- 3 novembre 2021CVE-2020-3580Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityRansomware
- 3 novembre 2021CVE-2020-3569IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
- 3 novembre 2021CVE-2020-3566IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
- 3 novembre 2021CVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Read-Only Path Traversal Vulnerability
- 3 novembre 2021CVE-2020-3161Cisco IP PhonesCisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
- 3 novembre 2021CVE-2020-3118IOS XRCisco IOS XR Software Discovery Protocol Format String Vulnerability
- 3 novembre 2021CVE-2019-1653Small Business RV320 and RV325 RoutersCisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
- 3 novembre 2021CVE-2018-0296Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
- 3 novembre 2021CVE-2018-0171IOS and IOS XECisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Dati: catalogo Known Exploited Vulnerabilities (KEV) della CISA, ultima aggiunta il 4 novembre 2026.
Il catalogo elenca solo le vulnerabilità con prove di sfruttamento, non tutte quelle del produttore.
Avvisi solo sui prodotti che usi
Con My Defence ricevi avvisi e briefing solo sui prodotti che usi, anche di Cisco.