← Back

Ios

ios

Vendor: Cisco • 613 CVEs

CVEs (613)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2001-0650
1Cisco
1Ios
Apr 16, 2026
Sep 20, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute.
CVE-2001-0711
1Cisco
1Ios
Apr 16, 2026
Aug 31, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string.
CVE-2001-1097
1Cisco
1Ios
Apr 16, 2026
Jul 24, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.
CVE-2001-0537
1Cisco
1Ios
Apr 16, 2026
Jul 21, 2001
N/A· v4
N/A· v3
9.3 HIGH· v2
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
CVE-2001-1183
1Cisco
1Ios
Apr 16, 2026
Jul 12, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.
CVE-2001-0288
1Cisco
1Ios
Apr 16, 2026
May 3, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVE-2000-0368
1Cisco
1Ios
Apr 16, 2026
Mar 12, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
CVE-2004-1776
1Cisco
1Ios
Apr 16, 2026
Feb 28, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) st...Show more
Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard.Show less
CVE-2001-1434
1Cisco
1Ios
Apr 16, 2026
Feb 28, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not b...Show more
Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created.Show less
CVE-2000-0984
1Cisco
1Ios
Apr 16, 2026
Dec 19, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
CVE-2000-0700
1Cisco
4Gigabit Switch Router 12008
Gigabit Switch Router 12012Gigabit Switch Router 12016+1 more
Apr 16, 2026
Oct 20, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote...Show more
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets.Show less
CVE-2000-0486
1Cisco
2Ios
Tacacs+
Apr 16, 2026
May 30, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field.
CVE-2000-0345
1Cisco
7Ios
Router 2500Router 2600+4 more
Apr 16, 2026
May 3, 2000
N/A· v4
N/A· v3
2.1 LOW· v2
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
CVE-2000-0380
1Cisco
1Ios
Apr 16, 2026
Apr 26, 2000
N/A· v4
N/A· v3
7.1 HIGH· v2
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
CVE-2000-0268
1Cisco
123660 Router
7100 Router7200 Router+9 more
Apr 16, 2026
Apr 20, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
CVE-1999-1465
1Cisco
1Ios
Apr 16, 2026
Dec 31, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interfac...Show more
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.Show less
CVE-1999-1464
1Cisco
1Ios
Apr 16, 2026
Dec 31, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to a...Show more
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564.Show less
CVE-1999-1175
1Cisco
1Ios
Apr 16, 2026
Dec 31, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2...Show more
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.Show less
CVE-1999-1129
1Cisco
2Catalyst 2900 Vlan
Ios
Apr 16, 2026
Sep 1, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.
CVE-1999-0775
1Cisco
1Ios
Apr 16, 2026
Jun 10, 1999
N/A· v4
N/A· v3
10.0 HIGH· v2
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.