How many Cisco ios CVEs are in CISA KEV?

Yes — 39 of Cisco ios's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Cisco ios vulnerabilities?

Yes — 67 of Cisco ios's CVEs have a known public exploit.

Which versions of Cisco ios are affected?

9,959 distinct Cisco ios versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Cisco ios CVEs?

Cisco ios's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-399, CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical Cisco ios vulnerabilities are there?

Cisco ios has 41 critical and 340 high-severity CVEs.

What is the average severity of Cisco ios CVEs?

The average CVSS base score across Cisco ios's scored CVEs is 7.0.

Cisco ios Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Cisco ios has 626 published CVE records since 1999, of which 39 are in CISA's Known Exploited Vulnerabilities catalog and 67 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Cisco ios, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include 1000 integrated services router, 1100 integrated services router, 1100 terminal services gateways, 1100-4g integrated services router, 1100-4g/6g integrated services router, 1100-4gltegb integrated services router.

Severity and exploitation

How the CVSS severity of Cisco ios's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical41

High340

Medium233

Low12

In CISA’s Known Exploited Vulnerabilities catalog

39 of Cisco ios's CVEs are confirmed exploited in the wild.

Public exploits

67 of Cisco ios's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Cisco ios version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

15.2(8)E228 CVEs
15.2(8)E328 CVEs
15.2(6)E327 CVEs
15.2(7)E27 CVEs
15.2(7)E0s27 CVEs
15.2(7)E1a27 CVEs
15.2(7)E227 CVEs
15.2(7)E327 CVEs
15.2(7)E427 CVEs
15.2(7)E527 CVEs
15.2(7)E627 CVEs
15.2(7)E727 CVEs

Frequently asked questions

Common questions about Cisco ios vulnerabilities.

How many CVEs does Cisco ios have?: Cisco ios has 626 published CVE records since 1999.
How many Cisco ios CVEs are in CISA KEV?: Yes — 39 of Cisco ios's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Cisco ios vulnerabilities?: Yes — 67 of Cisco ios's CVEs have a known public exploit.
Which versions of Cisco ios are affected?: 9,959 distinct Cisco ios versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Cisco ios CVEs?: Cisco ios's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-399, CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical Cisco ios vulnerabilities are there?: Cisco ios has 41 critical and 340 high-severity CVEs.
What is the average severity of Cisco ios CVEs?: The average CVSS base score across Cisco ios's scored CVEs is 7.0.

Cisco ios Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other Cisco products

Frequently asked questions

References

Track Cisco ios vulnerabilities

Version ranges

Fixed in