Cisco IOS XE SD-WAN vulnerabilities

26 CVEs affecting Cisco IOS XE SD-WAN, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20352, published 2025-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-20352: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability, published 2025-09-24. High severity, CVSS 7.7. Actively exploited: in CISA KEV since 2025-09-29. EPSS: 40.2% chance of exploitation in the next 30 days. A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low…
CVE-2020-3375, published 2020-07-31. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input…
CVE-2021-34727, published 2021-09-23. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to…
CVE-2021-1300, published 2021-01-20. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see…
CVE-2021-1301, published 2021-01-20. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see…
CVE-2021-1274, published 2021-01-20. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about…
CVE-2021-1273, published 2021-01-20. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about…
CVE-2021-1619, published 2021-09-23. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF…
CVE-2021-1278, published 2021-01-20. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about…
CVE-2021-1279, published 2021-01-20. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about…

Latest

CVE-2025-20151, published 2025-05-07. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote…
CVE-2024-20373, published 2024-11-15. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL) feature of Cisco IOS Software and Cisco IOS XE Software could allow an…
CVE-2024-20455, published 2024-09-25. High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote…
CVE-2023-20035, published 2023-03-23. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to…
CVE-2022-20850, published 2022-09-30. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an…
CVE-2021-1529, published 2021-10-21. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient…
CVE-2021-34729, published 2021-09-23. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected…
CVE-2021-34725, published 2021-09-23. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying…