Vulnerabilidades en Cisco

3366 resultados
Análisis Vexday

Com 3.204 CVEs catalogadas e 53 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração dos produtos Cisco está 3,7 vezes acima da média geral do catálogo, o que indica risco operacional significativamente elevado para organizações que dependem dessas tecnologias. Há ainda 199 vulnerabilidades de severidade crítica e 77 com prova de conceito pública disponível, ampliando a superfície de ataque explorável sem necessidade de capacidade ofensiva avançada. O tipo de falha mais recorrente é CWE-20 (validação de entrada inadequada), uma classe de vulnerabilidade frequentemente presente em componentes de rede e que tende a produzir impacto amplo quando explorada. A CVE mais perigosa em exploração ativa neste momento é CVE-2021-1498, com EPSS máximo de 1,0 — indicando probabilidade de exploração extremamente alta —, e deve ser tratada como prioridade imediata em qualquer processo de gestão de patches.

CVE-2021-1219HIGHCisco Smart Software Manager Satellite Static Credential VulnerabilityEPSS 0.3%CVE-2024-20312HIGHA vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allEPSS 0.3%CVE-2026-20075MEDIUMCisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2022-20930MEDIUMCisco SD-WAN Software Arbitrary File Corruption VulnerabilityEPSS 0.3%CVE-2025-20347MEDIUMCisco Nexus Dashboard Fabric Controller Unauthorized REST API VulnerabilityEPSS 0.3%CVE-2025-20377MEDIUMCisco Unified Intelligence Center API Information Disclosure VulnerabilityEPSS 0.3%CVE-2021-1371MEDIUMCisco IOS XE SD-WAN Software Console Privilege Escalation VulnerabilityEPSS 0.3%CVE-2021-34700MEDIUMCisco SD-WAN vManage Software Information Disclosure VulnerabilityEPSS 0.3%CVE-2020-3362MEDIUMCisco Network Services Orchestrator Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-20220MEDIUMCisco Crosswork Network Controller Remote Code Execution VulnerabilityEPSS 0.3%CVE-2021-1231MEDIUMCisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial of Service VulnerabilityEPSS 0.3%CVE-2025-20330MEDIUMCisco Unified Communications Manager IM and Presence Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2026-20311MEDIUMCisco IOS XE Software Web UI Denial of Service VulnerabilityEPSS 0.3%CVE-2023-20050MEDIUMCisco NX-OS Software CLI Command Injection VulnerabilityEPSS 0.3%CVE-2026-20020MEDIUMA vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjEPSS 0.3%CVE-2021-1612MEDIUMCisco IOS XE SD-WAN Software Arbitrary File Overwrite VulnerabilityEPSS 0.3%CVE-2024-20319MEDIUMA vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured mEPSS 0.3%CVE-2021-1428HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesEPSS 0.2%CVE-2021-1427HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesEPSS 0.2%CVE-2021-1426HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesEPSS 0.2%