{"meta":{"title":"KEV entries: Cisco","description":"All KEV entries for vendor Cisco.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":99,"vendor":"Cisco","entries":99,"shareOfCatalogPercent":5.8,"ransomwareKnown":7,"firstDateAdded":"2021-11-03","latestDateAdded":"2026-09-16","rank":2},"data":[{"cveID":"CVE-2026-76460","vendorProject":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","dateAdded":"2026-09-16","dueDate":"2026-09-19","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-648"],"shortDescription":"Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76460","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-76460/"},{"cveID":"CVE-2026-76461","vendorProject":"Cisco","product":"Secure Email Gateway","vulnerabilityName":"Cisco Secure Email Gateway SQL Injection Vulnerability","dateAdded":"2026-09-14","dueDate":"2026-09-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-89"],"shortDescription":"Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76461","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-76461/"},{"cveID":"CVE-2026-20079","vendorProject":"Cisco","product":"Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management","vulnerabilityName":"Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-288"],"shortDescription":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-20079/"},{"cveID":"CVE-2026-20349","vendorProject":"Cisco","product":"Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ","vulnerabilityName":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability","dateAdded":"2026-08-11","dueDate":"2026-08-14","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-244"],"shortDescription":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20349","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-20349/"},{"cveID":"CVE-2026-20316","vendorProject":"Cisco","product":"Secure Firewall Management Center (FMC)","vulnerabilityName":"Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","dateAdded":"2026-07-29","dueDate":"2026-08-01","knownRansomwareCampaignUse":"Known","cwes":["CWE-259"],"shortDescription":"Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20316","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-20316/"},{"cveID":"CVE-2008-4128","vendorProject":"Cisco","product":"IOS","vulnerabilityName":"Cisco IOS Cross-Site Request Forgery Vulnerability","dateAdded":"2026-07-13","dueDate":"2026-07-16","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-352"],"shortDescription":"Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain \"show privilege\" command to the /level/15/exec/- URI, and (2) a certain \"alias exec\" command to the /level/15/exec/-/configure/http URI.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2008-4128","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2008-4128/"},{"cveID":"CVE-2026-20230","vendorProject":"Cisco","product":"Unified Communications Manager","vulnerabilityName":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-06-25","dueDate":"2026-06-28","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-918"],"shortDescription":"Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20230","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-20230/"},{"cveID":"CVE-2026-20262","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","dateAdded":"2026-06-15","dueDate":"2026-06-29","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-22"],"shortDescription":"Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20262","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20262"},{"cveID":"CVE-2026-20245","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","dateAdded":"2026-06-09","dueDate":"2026-06-23","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-116"],"shortDescription":"Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx ; https://nvd.nist.gov/vuln/detail/CVE-2026-20245","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20245"},{"cveID":"CVE-2026-20182","vendorProject":"Cisco","product":"Catalyst SD-WAN","vulnerabilityName":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","dateAdded":"2026-05-14","dueDate":"2026-05-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-287"],"shortDescription":"Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW ; https://nvd.nist.gov/vuln/detail/CVE-2026-20182","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20182"},{"cveID":"CVE-2026-20133","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-200"],"shortDescription":"Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information on affected systems.","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20133","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20133"},{"cveID":"CVE-2026-20128","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-257"],"shortDescription":"Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20128","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20128"},{"cveID":"CVE-2026-20122","vendorProject":"Cisco","product":"Catalyst SD-WAN Manger","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-648"],"shortDescription":"Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20122","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20122"},{"cveID":"CVE-2026-20131","vendorProject":"Cisco","product":"Secure Firewall Management Center (FMC)","vulnerabilityName":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-19","dueDate":"2026-03-22","knownRansomwareCampaignUse":"Known","cwes":["CWE-502"],"shortDescription":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh ; https://nvd.nist.gov/vuln/detail/CVE-2026-20131","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20131"},{"cveID":"CVE-2026-20127","vendorProject":"Cisco","product":"Catalyst SD-WAN Controller and Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","dateAdded":"2026-02-25","dueDate":"2026-02-27","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-287"],"shortDescription":"Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20127","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20127"},{"cveID":"CVE-2022-20775","vendorProject":"Cisco","product":"SD-WAN","vulnerabilityName":"Cisco SD-WAN Path Traversal Vulnerability","dateAdded":"2026-02-25","dueDate":"2026-02-27","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-25","CWE-282"],"shortDescription":"Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sd-wan-priv-E6e8tEdF.html ; https://nvd.nist.gov/vuln/detail/CVE-2022-20775","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2022-20775"},{"cveID":"CVE-2026-20045","vendorProject":"Cisco","product":"Unified Communications Manager","vulnerabilityName":"Cisco Unified Communications Products Code Injection Vulnerability","dateAdded":"2026-01-21","dueDate":"2026-02-11","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-94"],"shortDescription":"Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b ; https://nvd.nist.gov/vuln/detail/CVE-2026-20045","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-20045"},{"cveID":"CVE-2025-20393","vendorProject":"Cisco","product":"Multiple Products","vulnerabilityName":"Cisco Multiple Products Improper Input Validation Vulnerability","dateAdded":"2025-12-17","dueDate":"2025-12-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Cisco's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Cisco products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20393","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-20393"},{"cveID":"CVE-2025-20352","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-121"],"shortDescription":"Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte ; https://nvd.nist.gov/vuln/detail/CVE-2025-20352","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-20352"},{"cveID":"CVE-2025-20362","vendorProject":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","vulnerabilityName":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","dateAdded":"2025-09-25","dueDate":"2025-09-26","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-862"],"shortDescription":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.","requiredAction":"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ;   https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW ; https://nvd.nist.gov/vuln/detail/CVE-2025-20362","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-20362"},{"cveID":"CVE-2025-20333","vendorProject":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","vulnerabilityName":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","dateAdded":"2025-09-25","dueDate":"2025-09-26","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-120"],"shortDescription":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.","requiredAction":"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ;    https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ; https://nvd.nist.gov/vuln/detail/CVE-2025-20333","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-20333"},{"cveID":"CVE-2025-20337","vendorProject":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Injection Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-74"],"shortDescription":"Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20337","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-20337"},{"cveID":"CVE-2025-20281","vendorProject":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Injection Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-74"],"shortDescription":"Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20281","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-20281"},{"cveID":"CVE-2024-20439","vendorProject":"Cisco","product":"Smart Licensing Utility","vulnerabilityName":"Cisco Smart Licensing Utility Static Credential Vulnerability","dateAdded":"2025-03-31","dueDate":"2025-04-21","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-912"],"shortDescription":"Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw ; https://nvd.nist.gov/vuln/detail/CVE-2024-20439","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2024-20439"},{"cveID":"CVE-2023-20118","vendorProject":"Cisco","product":"Small Business RV Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Command Injection Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-77"],"shortDescription":"Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 ; https://nvd.nist.gov/vuln/detail/CVE-2023-20118","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2023-20118"},{"cveID":"CVE-2014-2120","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-79"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2014-2120"},{"cveID":"CVE-2024-20481","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Denial-of-Service Vulnerability","dateAdded":"2024-10-24","dueDate":"2024-11-14","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-772"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW ; https://nvd.nist.gov/vuln/detail/CVE-2024-20481","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-20481"},{"cveID":"CVE-2024-20399","vendorProject":"Cisco","product":"NX-OS","vulnerabilityName":"Cisco NX-OS Command Injection Vulnerability","dateAdded":"2024-07-02","dueDate":"2024-07-23","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP;   https://nvd.nist.gov/vuln/detail/CVE-2024-20399","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-20399"},{"cveID":"CVE-2024-20359","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Privilege Escalation Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-94"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h;  https://nvd.nist.gov/vuln/detail/CVE-2024-20359","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-20359"},{"cveID":"CVE-2024-20353","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Denial of Service Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-835"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2;   https://nvd.nist.gov/vuln/detail/CVE-2024-20353","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-20353"},{"cveID":"CVE-2020-3259","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Information Disclosure Vulnerability","dateAdded":"2024-02-15","dueDate":"2024-03-07","knownRansomwareCampaignUse":"Known","cwes":["CWE-200"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-info-disclose-9eJtycMB; https://nvd.nist.gov/vuln/detail/CVE-2020-3259","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2020-3259"},{"cveID":"CVE-2023-20273","vendorProject":"Cisco","product":"Cisco IOS XE Web UI","vulnerabilityName":"Cisco IOS XE Web UI Command Injection Vulnerability","dateAdded":"2023-10-23","dueDate":"2023-10-27","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privilege to root and write the implant to the file system. Cisco identified CVE-2023-20273 as the vulnerability exploited to deploy the implant. CVE-2021-1435, previously associated with the exploitation events, is no longer believed to be related to this activity.","requiredAction":"Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z;  https://nvd.nist.gov/vuln/detail/CVE-2023-20273","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-20273"},{"cveID":"CVE-2023-20198","vendorProject":"Cisco","product":"IOS XE Web UI","vulnerabilityName":"Cisco IOS XE Web UI Privilege Escalation Vulnerability","dateAdded":"2023-10-16","dueDate":"2023-10-20","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-420"],"shortDescription":"Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated attacker to create an account with privilege level 15 access. The attacker can then use that account to gain control of the affected device.","requiredAction":"Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.","notes":"https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-dublin-17121/221128-software-fix-availability-for-cisco-ios.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-20198","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-20198"},{"cveID":"CVE-2023-20109","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-getvpn-rce-g8qR68sx;  https://nvd.nist.gov/vuln/detail/CVE-2023-20109","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-20109"},{"cveID":"CVE-2023-20269","vendorProject":"Cisco","product":"Adaptive Security Appliance and Firepower Threat Defense","vulnerabilityName":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","dateAdded":"2023-09-13","dueDate":"2023-10-04","knownRansomwareCampaignUse":"Known","cwes":["CWE-288"],"shortDescription":"Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.","requiredAction":"Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC;  https://nvd.nist.gov/vuln/detail/CVE-2023-20269","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-20269"},{"cveID":"CVE-2016-6415","vendorProject":"Cisco","product":"IOS, IOS XR, and IOS XE","vulnerabilityName":"Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-200"],"shortDescription":"Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.","requiredAction":"Apply updates per vendor instructions.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1; https://nvd.nist.gov/vuln/detail/CVE-2016-6415","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2016-6415"},{"cveID":"CVE-2004-1464","vendorProject":"Cisco","product":"IOS","vulnerabilityName":"Cisco IOS Denial-of-Service Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.","requiredAction":"Apply updates per vendor instructions.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040827-telnet; https://nvd.nist.gov/vuln/detail/CVE-2004-1464","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2004-1464"},{"cveID":"CVE-2017-6742","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2023-04-19","dueDate":"2023-05-10","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.","requiredAction":"Apply updates per vendor instructions.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; https://nvd.nist.gov/vuln/detail/CVE-2017-6742","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2017-6742"},{"cveID":"CVE-2020-3433","vendorProject":"Cisco","product":"AnyConnect Secure","vulnerabilityName":"Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomwareCampaignUse":"Known","cwes":["CWE-427"],"shortDescription":"Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.","requiredAction":"Apply updates per vendor instructions.","notes":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-F26WwJW; https://nvd.nist.gov/vuln/detail/CVE-2020-3433","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2020-3433"},{"cveID":"CVE-2020-3153","vendorProject":"Cisco","product":"AnyConnect Secure","vulnerabilityName":"Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomwareCampaignUse":"Known","cwes":["CWE-427"],"shortDescription":"Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.","requiredAction":"Apply updates per vendor instructions.","notes":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj; https://nvd.nist.gov/vuln/detail/CVE-2020-3153","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2020-3153"},{"cveID":"CVE-2019-15271","vendorProject":"Cisco","product":"RV Series Routers","vulnerabilityName":"Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-502"],"shortDescription":"A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-15271","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2019-15271"},{"cveID":"CVE-2016-6367","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-77"],"shortDescription":"A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6367","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-6367"},{"cveID":"CVE-2016-6366","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6366","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-6366"},{"cveID":"CVE-2022-20821","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Open Port Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-923"],"shortDescription":"Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20821","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-20821"},{"cveID":"CVE-2018-0147","vendorProject":"Cisco","product":"Secure Access Control System (ACS)","vulnerabilityName":"Cisco Secure Access Control System Java Deserialization Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0147","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0147"},{"cveID":"CVE-2018-0125","vendorProject":"Cisco","product":"VPN Routers","vulnerabilityName":"Cisco VPN Routers Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0125","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0125"},{"cveID":"CVE-2017-3881","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-3881","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-3881"},{"cveID":"CVE-2015-0666","vendorProject":"Cisco","product":"Prime Data Center Network Manager (DCNM)","vulnerabilityName":"Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-22"],"shortDescription":"Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0666","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-0666"},{"cveID":"CVE-2010-3035","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-3035","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2010-3035"},{"cveID":"CVE-2009-2055","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-2055","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2009-2055"},{"cveID":"CVE-2022-20708","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-121"],"shortDescription":"A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20708","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-20708"},{"cveID":"CVE-2022-20703","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-347"],"shortDescription":"A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20703","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-20703"},{"cveID":"CVE-2022-20701","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-121"],"shortDescription":"A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20701","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-20701"},{"cveID":"CVE-2022-20700","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-121"],"shortDescription":"A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20700","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-20700"},{"cveID":"CVE-2022-20699","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-785"],"shortDescription":"A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20699","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-20699"},{"cveID":"CVE-2019-1652","vendorProject":"Cisco","product":"Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers","vulnerabilityName":"Cisco Small Business Routers Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1652","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2019-1652"},{"cveID":"CVE-2018-0180","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0180","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0180"},{"cveID":"CVE-2018-0179","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0179","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0179"},{"cveID":"CVE-2018-0175","vendorProject":"Cisco","product":"IOS, XR, and XE Software","vulnerabilityName":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0175","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0175"},{"cveID":"CVE-2018-0174","vendorProject":"Cisco","product":"IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0174","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0174"},{"cveID":"CVE-2018-0173","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0173","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0173"},{"cveID":"CVE-2018-0172","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0172","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0172"},{"cveID":"CVE-2018-0167","vendorProject":"Cisco","product":"IOS, XR, and XE Software","vulnerabilityName":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0167","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0167"},{"cveID":"CVE-2018-0161","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Resource Management Errors Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0161","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0161"},{"cveID":"CVE-2018-0159","vendorProject":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0159","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0159"},{"cveID":"CVE-2018-0158","vendorProject":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0158","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0158"},{"cveID":"CVE-2018-0156","vendorProject":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0156","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0156"},{"cveID":"CVE-2018-0155","vendorProject":"Cisco","product":"Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches","vulnerabilityName":"Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-388"],"shortDescription":"A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial-of-service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0155","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0155"},{"cveID":"CVE-2018-0154","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0154","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0154"},{"cveID":"CVE-2018-0151","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0151","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-0151"},{"cveID":"CVE-2017-6744","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6744","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6744"},{"cveID":"CVE-2017-6743","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6743","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6743"},{"cveID":"CVE-2017-6740","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6740","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6740"},{"cveID":"CVE-2017-6739","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6739","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6739"},{"cveID":"CVE-2017-6738","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6738","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6738"},{"cveID":"CVE-2017-6737","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6737","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6737"},{"cveID":"CVE-2017-6736","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6736","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6736"},{"cveID":"CVE-2017-6663","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6663","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6663"},{"cveID":"CVE-2017-6627","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6627","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6627"},{"cveID":"CVE-2017-12319","vendorProject":"Cisco","product":"IOS XE Software","vulnerabilityName":"Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12319","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12319"},{"cveID":"CVE-2017-12240","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12240","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12240"},{"cveID":"CVE-2017-12238","vendorProject":"Cisco","product":"Catalyst 6800 Series Switches","vulnerabilityName":"Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12238","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12238"},{"cveID":"CVE-2017-12237","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12237","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12237"},{"cveID":"CVE-2017-12235","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12235","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12235"},{"cveID":"CVE-2017-12234","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12234","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12234"},{"cveID":"CVE-2017-12233","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12233","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12233"},{"cveID":"CVE-2017-12232","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12232","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12232"},{"cveID":"CVE-2017-12231","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12231","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-12231"},{"cveID":"CVE-2021-1498","vendorProject":"Cisco","product":"HyperFlex HX","vulnerabilityName":"Cisco HyperFlex HX Data Platform Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1498","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-1498"},{"cveID":"CVE-2021-1497","vendorProject":"Cisco","product":"HyperFlex HX","vulnerabilityName":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1497","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-1497"},{"cveID":"CVE-2020-3580","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","cwes":["CWE-79"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface.  Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3580","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-3580"},{"cveID":"CVE-2020-3569","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-400"],"shortDescription":"Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3569","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-3569"},{"cveID":"CVE-2020-3566","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-400"],"shortDescription":"Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3566","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-3566"},{"cveID":"CVE-2020-3452","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Read-Only Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs.  An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3452","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-3452"},{"cveID":"CVE-2020-3161","vendorProject":"Cisco","product":"Cisco IP Phones","vulnerabilityName":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code remotely with root privileges or cause a denial-of-service (DoS) condition.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3161","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-3161"},{"cveID":"CVE-2020-3118","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-134"],"shortDescription":"Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3118","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-3118"},{"cveID":"CVE-2019-1653","vendorProject":"Cisco","product":"Small Business RV320 and RV325 Routers","vulnerabilityName":"Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-284"],"shortDescription":"Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1653","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2019-1653"},{"cveID":"CVE-2018-0296","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0296","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2018-0296"},{"cveID":"CVE-2018-0171","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0171","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2018-0171"}]}