Product of Cisco

IOS and IOS XE Software

As of , 14 Cisco IOS and IOS XE Software vulnerabilities are on CISA's list of exploited vulnerabilities; 0 were added in 2026. Patch first: CVE-2017-6736.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2017-6736SNMP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch this weekEPSS 0.700.70
2CVE-2017-6737SNMP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.45
3CVE-2017-6742SNMP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.21
4CVE-2017-12240DHCP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.14
5CVE-2018-0151IOS Software and Cisco IOS XE Software Quality of Service Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.14
6CVE-2017-6738SNMP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.11
7CVE-2017-6739SNMP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.11
8CVE-2017-6740SNMP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.11
9CVE-2017-6743SNMP Remote Code ExecutionCisco IOS and IOS XE SoftwarePatch soon0.11
10CVE-2017-12237Internet Key Exchange Denial-of-ServiceCisco IOS and IOS XE SoftwarePatch soon0.07
11CVE-2018-0172Improper Input ValidationCisco IOS and IOS XE SoftwarePatch soon0.08
12CVE-2018-0173Improper Input ValidationCisco IOS and IOS XE SoftwarePatch soon0.08
13CVE-2017-6627IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-ServiceCisco IOS and IOS XE SoftwarePatch soon0.06
14CVE-2017-6663IOS Software and Cisco IOS XE Software Denial-of-ServiceCisco IOS and IOS XE SoftwarePatch soon0.02

Added each year

510152022: 131320222023: 1120232024: nonenone20242025: nonenone20252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
202213
20231
2024none
2025none
2026none

Used in ransomware