Vulnerabilidades en Cisco

3366 resultados
Análisis Vexday

Com 3.204 CVEs catalogadas e 53 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração dos produtos Cisco está 3,7 vezes acima da média geral do catálogo, o que indica risco operacional significativamente elevado para organizações que dependem dessas tecnologias. Há ainda 199 vulnerabilidades de severidade crítica e 77 com prova de conceito pública disponível, ampliando a superfície de ataque explorável sem necessidade de capacidade ofensiva avançada. O tipo de falha mais recorrente é CWE-20 (validação de entrada inadequada), uma classe de vulnerabilidade frequentemente presente em componentes de rede e que tende a produzir impacto amplo quando explorada. A CVE mais perigosa em exploração ativa neste momento é CVE-2021-1498, com EPSS máximo de 1,0 — indicando probabilidade de exploração extremamente alta —, e deve ser tratada como prioridade imediata em qualquer processo de gestão de patches.

CVE-2025-20258MEDIUMA vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emEPSS 0.3%CVE-2024-20515MEDIUMCisco Identity Services Engine Information Disclosure VulnerabilityEPSS 0.3%CVE-2020-3520MEDIUMCisco Data Center Network Manager Information Disclosure VulnerabilityEPSS 0.3%CVE-2024-20491MEDIUMCisco Nexus Dashboard Insights Information Disclosure VulnerabilityEPSS 0.3%CVE-2018-15407—Cisco HyperFlex World-Readable Sensitive Information VulnerabilityEPSS 0.3%CVE-2025-20168MEDIUMCisco Common Services Platform Collector Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2020-3600HIGHCisco SD-WAN Software Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-20490MEDIUMCisco Nexus Dashboard Fabric Controller and Nexus Dashboard Orchestrator Information Disclosure VulnerabilityEPSS 0.3%CVE-2025-20167MEDIUMCisco Common Services Platform Collector Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2020-3593HIGHCisco SD-WAN Software Privilege Escalation VulnerabilityEPSS 0.3%CVE-2020-3595HIGHCisco SD-WAN Software Privilege Escalation VulnerabilityEPSS 0.3%CVE-2020-3594HIGHCisco SD-WAN Software Privilege Escalation VulnerabilityEPSS 0.3%CVE-2026-76444MEDIUMCisco Identity Services Engine Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-20014HIGHA vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remotEPSS 0.3%CVE-2026-20235MEDIUMCisco Identity Services Engine Information Disclosure VulnerabilityEPSS 0.3%CVE-2020-3166MEDIUMCisco FXOS Software CLI Arbitrary File Read and Write VulnerabilityEPSS 0.3%CVE-2020-3524MEDIUMCisco IOS XE ROM Monitor Software VulnerabilityEPSS 0.3%CVE-2020-3180HIGHCisco SD-WAN Solution Software Static Credentials VulnerabilityEPSS 0.3%CVE-2021-1283MEDIUMCisco Data Center Network Manager Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-20114MEDIUMA vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to eEPSS 0.3%