Vulnerabilidades en Cisco

3365 resultados
Análisis Vexday

Com 3.204 CVEs catalogadas e 53 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração dos produtos Cisco está 3,7 vezes acima da média geral do catálogo, o que indica risco operacional significativamente elevado para organizações que dependem dessas tecnologias. Há ainda 199 vulnerabilidades de severidade crítica e 77 com prova de conceito pública disponível, ampliando a superfície de ataque explorável sem necessidade de capacidade ofensiva avançada. O tipo de falha mais recorrente é CWE-20 (validação de entrada inadequada), uma classe de vulnerabilidade frequentemente presente em componentes de rede e que tende a produzir impacto amplo quando explorada. A CVE mais perigosa em exploração ativa neste momento é CVE-2021-1498, com EPSS máximo de 1,0 — indicando probabilidade de exploração extremamente alta —, e deve ser tratada como prioridade imediata em qualquer processo de gestão de patches.

CVE-2021-1424MEDIUMCisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service VulnerabilityEPSS 0.8%CVE-2022-20959MEDIUMCisco Identity Services Engine Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2019-1838MEDIUMCisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2024-20378HIGHA vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieveEPSS 0.8%CVE-2019-15974MEDIUMCisco Managed Services Accelerator Open Redirect VulnerabilityEPSS 0.8%CVE-2019-1647HIGHCisco SD-WAN Solution Unauthorized Access VulnerabilityEPSS 0.8%CVE-2020-3267MEDIUMCisco Unified Contact Center Express Improper API Authorization VulnerabilityEPSS 0.8%CVE-2024-20254CRITICALMultiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, EPSS 0.8%CVE-2019-16010MEDIUMCisco SD-WAN Solution vManage Stored Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2019-1594HIGHCisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service VulnerabilityEPSS 0.8%CVE-2021-1440MEDIUMCisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service VulnerabilityEPSS 0.8%CVE-2020-3522MEDIUMCisco Data Center Network Manager Authorization Bypass VulnerabilityEPSS 0.8%CVE-2019-15268MEDIUMCisco Firepower Management Center Multiple Cross-Site Scripting VulnerabilitiesEPSS 0.8%CVE-2019-12668MEDIUMCisco IOS and IOS XE Software Stored Banner Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2019-1949MEDIUMCisco Firepower Management Center Persistent Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2019-12626MEDIUMCisco Unified Contact Center Express Stored Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2019-12667MEDIUMCisco IOS XE Software Stored Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2019-1973MEDIUMCisco Enterprise NFV Infrastructure Software Cross-site Scripting VulnerabilityEPSS 0.8%CVE-2019-1956MEDIUMCisco SPA112 2-Port Phone Adapter Stored Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2020-3558MEDIUMCisco Firepower Management Center Software Open Redirect VulnerabilityEPSS 0.8%