Vulnerabilidades en Cisco

3365 resultados
Análisis Vexday

Com 3.204 CVEs catalogadas e 53 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração dos produtos Cisco está 3,7 vezes acima da média geral do catálogo, o que indica risco operacional significativamente elevado para organizações que dependem dessas tecnologias. Há ainda 199 vulnerabilidades de severidade crítica e 77 com prova de conceito pública disponível, ampliando a superfície de ataque explorável sem necessidade de capacidade ofensiva avançada. O tipo de falha mais recorrente é CWE-20 (validação de entrada inadequada), uma classe de vulnerabilidade frequentemente presente em componentes de rede e que tende a produzir impacto amplo quando explorada. A CVE mais perigosa em exploração ativa neste momento é CVE-2021-1498, com EPSS máximo de 1,0 — indicando probabilidade de exploração extremamente alta —, e deve ser tratada como prioridade imediata em qualquer processo de gestão de patches.

CVE-2024-20271HIGHA vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a dEPSS 0.6%CVE-2019-15968MEDIUMCisco Unified Communications Domain Manager Persistent Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2021-1135MEDIUMCisco Data Center Network Manager REST API VulnerabilitiesEPSS 0.6%CVE-2019-1834HIGHCisco Aironet Series Access Points Denial of Service VulnerabilityEPSS 0.6%CVE-2019-1761MEDIUMCisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak VulnerabilityEPSS 0.6%CVE-2024-20433HIGHA vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentEPSS 0.6%CVE-2020-26082MEDIUMA vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthentiEPSS 0.6%CVE-2020-3113MEDIUMCisco Data Center Network Manager Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2020-3185MEDIUMCisco TelePresence Management Suite Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2021-1466MEDIUMCisco SD-WAN vDaemon Buffer Overflow VulnerabilityEPSS 0.6%CVE-2020-3536MEDIUMCisco SD-WAN vManage Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2018-0197—Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service VulnerabilityEPSS 0.6%CVE-2021-34757MEDIUMCisco Business 220 Series Smart Switches Static Key and Password VulnerabilitiesEPSS 0.6%CVE-2021-1482MEDIUMCisco SD-WAN vManage Authorization Bypass VulnerabilityEPSS 0.6%CVE-2023-20182MEDIUMCisco DNA Center Software API VulnerabilitiesEPSS 0.6%CVE-2026-76440CRITICALCisco Secure Email Gateway Security Hardening ReleaseEPSS 0.6%CVE-2024-20379MEDIUMA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower ManagemeEPSS 0.6%CVE-2020-26063MEDIUMCisco Integrated Management Controller Software Authorization Bypass VulnerabilityEPSS 0.6%CVE-2019-15281MEDIUMCisco Identity Services Engine Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2020-3340MEDIUMCisco Identity Services Engine Stored Cross-Site Scripting VulnerabilitiesEPSS 0.6%