Cisco IOS vulnerabilities

7 CVEs affecting Cisco IOS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4204, published 2015-06-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1153, published 2008-03-27. High severity, CVSS 7.1. EPSS: 5.6% chance of exploitation in the next 30 days. Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a…
CVE-2008-1152, published 2008-03-27. High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days. The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or…
CVE-2009-0634, published 2009-03-27. High severity, CVSS 7.1. EPSS: 2.8% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote…
CVE-2015-4204, published 2015-06-23. Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days. Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause a denial of service (memory consumption or PXF process…
CVE-2008-1156, published 2008-03-27. Medium severity, CVSS 5.1. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core…
CVE-2009-0633, published 2009-03-27. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input…
CVE-2009-0628, published 2009-03-27. High severity, CVSS 9.0. EPSS: 1.9% chance of exploitation in the next 30 days. Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an…