BLACKOUT MAP

Cisco: ausgenutzte Schwachstellen

HinzugefügtSchwachstelleProduktSchweregradAngriffswahrscheinlichkeit
14.10.2026Relative Path TraversalCVE-2026-76519Secure Email GatewayKritisch 9,82,2%
30.09.2026Hex EncodingCVE-2026-76504Catalyst SD-WAN ManagerKritisch 9,839%
16.09.2026Incorrect Use of Privileged APIsCVE-2026-76460Identity Services EngineKritisch 10,076%
14.09.2026SQL InjectionCVE-2026-76461Secure Email GatewayKritisch 9,830%
09.09.2026Firewall Management Center Authentication Bypass Using an Alternate Path or ChannelCVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementKritisch 10,088%
11.08.2026Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap InspectionCVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Hoch 8,61,0%
29.07.2026Secure Firewall Management Center Use of Hard-coded PasswordCVE-2026-20316von Ransomware genutztSecure Firewall Management Center (FMC)Mittel 5,335%
13.07.2026Cross-Site Request ForgeryCVE-2008-4128IOSHoch 8,134%
25.06.2026Server-Side Request Forgery (SSRF)CVE-2026-20230Unified Communications ManagerHoch 8,688%
15.06.2026Directory or Path TraversalCVE-2026-20262Catalyst SD-WAN ManagerMittel 6,529%
09.06.2026Improper Encoding or Escaping of OutputCVE-2026-20245Catalyst SD-WAN ManagerHoch 7,825%
14.05.2026Controller Authentication BypassCVE-2026-20182Catalyst SD-WANKritisch 10,092%
20.04.2026Exposure of Sensitive Information to an Unauthorized ActorCVE-2026-20133Catalyst SD-WAN ManagerMittel 6,531%
20.04.2026Storing Passwords in a Recoverable FormatCVE-2026-20128Catalyst SD-WAN ManagerHoch 7,57,3%
20.04.2026Catalyst SD-WAN Manager Incorrect Use of Privileged APIsCVE-2026-20122Catalyst SD-WAN MangerMittel 5,426%
19.03.2026Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted DataCVE-2026-20131von Ransomware genutztSecure Firewall Management Center (FMC)Kritisch 10,043%
25.02.2026Authentication BypassCVE-2026-20127Catalyst SD-WAN Controller and ManagerKritisch 10,089%
25.02.2026Path TraversalCVE-2022-20775SD-WANHoch 7,812%
21.01.2026Unified Communications Products Code InjectionCVE-2026-20045Unified Communications ManagerHoch 8,24,5%
17.12.2025Improper Input ValidationCVE-2025-20393Multiple ProductsKritisch 10,032%
29.09.2025Software SNMP Denial of Service and Remote Code ExecutionCVE-2025-20352IOS and IOS XEHoch 7,742%
25.09.2025Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing AuthorizationCVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseMittel 6,587%
25.09.2025Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer OverflowCVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKritisch 9,971%
28.07.2025InjectionCVE-2025-20337Identity Services EngineKritisch 10,074%
28.07.2025InjectionCVE-2025-20281Identity Services EngineKritisch 10,098%
31.03.2025Static CredentialCVE-2024-20439Smart Licensing UtilityKritisch 9,897%
03.03.2025Command InjectionCVE-2023-20118Small Business RV Series RoutersMittel 6,554%
12.11.2024Cross-Site Scripting (XSS)CVE-2014-2120Adaptive Security Appliance (ASA)Mittel 5,423%
24.10.2024ASA and FTD Denial-of-ServiceCVE-2024-20481Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Mittel 5,816%
02.07.2024Command InjectionCVE-2024-20399NX-OSMittel 6,04,3%
24.04.2024ASA and FTD Privilege EscalationCVE-2024-20359Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Mittel 6,019%
24.04.2024ASA and FTD Denial of ServiceCVE-2024-20353Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Hoch 8,670%
15.02.2024ASA and FTD Information DisclosureCVE-2020-3259von Ransomware genutztAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Hoch 7,572%
23.10.2023IOS XE Web UI Command InjectionCVE-2023-20273Cisco IOS XE Web UIHoch 7,293%
16.10.2023Privilege EscalationCVE-2023-20198IOS XE Web UIKritisch 10,099,6%
10.10.2023Group Encrypted Transport VPN Out-of-Bounds WriteCVE-2023-20109IOS and IOS XEMittel 6,62,5%
13.09.2023Unauthorized AccessCVE-2023-20269von Ransomware genutztAdaptive Security Appliance and Firepower Threat DefenseMittel 5,027%
19.05.2023IKEv1 Information DisclosureCVE-2016-6415IOS, IOS XR, and IOS XEHoch 7,588%
19.05.2023Denial-of-ServiceCVE-2004-1464IOSMittel 5,94,8%
19.04.2023SNMP Remote Code ExecutionCVE-2017-6742IOS and IOS XE SoftwareHoch 8,821%
24.10.2022Mobility Client for Windows DLL HijackingCVE-2020-3433von Ransomware genutztAnyConnect SecureHoch 7,810%
24.10.2022Mobility Client for Windows Uncontrolled Search PathCVE-2020-3153von Ransomware genutztAnyConnect SecureMittel 6,528%
08.06.2022Deserialization of Untrusted DataCVE-2019-15271RV Series RoutersHoch 8,85,5%
24.05.2022CLI Remote Code ExecutionCVE-2016-6367Adaptive Security Appliance (ASA)Hoch 7,823%
24.05.2022SNMP Buffer OverflowCVE-2016-6366Adaptive Security Appliance (ASA)Hoch 8,888%
23.05.2022Open PortCVE-2022-20821IOS XRMittel 6,511%
25.03.2022Secure Access Control System Java DeserializationCVE-2018-0147Secure Access Control System (ACS)Kritisch 9,818%
25.03.2022Remote Code ExecutionCVE-2018-0125VPN RoutersKritisch 9,855%
25.03.2022Remote Code ExecutionCVE-2017-3881IOS and IOS XEKritisch 9,899%
25.03.2022Directory TraversalCVE-2015-0666Prime Data Center Network Manager (DCNM)Hoch 7,540%
25.03.2022Border Gateway Protocol (BGP) Denial-of-ServiceCVE-2010-3035IOS XRHoch 7,55,7%
25.03.2022Border Gateway Protocol (BGP) Denial-of-ServiceCVE-2009-2055IOS XRMittel 5,93,3%
03.03.2022Small Business RV Series Routers Stack-based Buffer OverflowCVE-2022-20708Small Business RV160, RV260, RV340, and RV345 Series RoutersKritisch 10,015%
03.03.2022Small Business RV Series Routers Stack-based Buffer OverflowCVE-2022-20703Small Business RV160, RV260, RV340, and RV345 Series RoutersKritisch 10,09,2%
03.03.2022Small Business RV Series Routers Stack-based Buffer OverflowCVE-2022-20701Small Business RV160, RV260, RV340, and RV345 Series RoutersKritisch 10,09,7%
03.03.2022Small Business RV Series Routers Stack-based Buffer OverflowCVE-2022-20700Small Business RV160, RV260, RV340, and RV345 Series RoutersKritisch 10,05,7%
03.03.2022Small Business RV Series Routers Stack-based Buffer OverflowCVE-2022-20699Small Business RV160, RV260, RV340, and RV345 Series RoutersKritisch 10,072%
03.03.2022Small Business Routers Improper Input ValidationCVE-2019-1652Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersHoch 7,296%
03.03.2022Denial-of-ServiceCVE-2018-0180IOS SoftwareMittel 6,84,9%
03.03.2022Denial-of-ServiceCVE-2018-0179IOS SoftwareMittel 6,84,9%
03.03.2022Buffer OverflowCVE-2018-0175IOS, XR, and XE SoftwareHoch 8,03,5%
03.03.2022IOS Software and Cisco IOS XE Software Improper Input ValidationCVE-2018-0174IOS XE SoftwareHoch 8,67,6%
03.03.2022Improper Input ValidationCVE-2018-0173IOS and IOS XE SoftwareHoch 8,67,6%
03.03.2022Improper Input ValidationCVE-2018-0172IOS and IOS XE SoftwareHoch 8,67,8%
03.03.2022Buffer OverflowCVE-2018-0167IOS, XR, and XE SoftwareHoch 8,83,4%
03.03.2022Resource Management ErrorsCVE-2018-0161IOS SoftwareMittel 6,34,1%
03.03.2022IOS and XE Software Internet Key Exchange Version 1 Denial-of-ServiceCVE-2018-0159IOS Software and Cisco IOS XE SoftwareHoch 7,56,9%
03.03.2022IOS and XE Software Internet Key Exchange Memory LeakCVE-2018-0158IOS Software and Cisco IOS XE SoftwareHoch 8,67,2%
03.03.2022Smart Install Denial-of-ServiceCVE-2018-0156IOS Software and Cisco IOS XE SoftwareHoch 7,59,4%
03.03.2022Catalyst Bidirectional Forwarding Detection Denial-of-ServiceCVE-2018-0155Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesHoch 8,67,7%
03.03.2022Integrated Services Module for VPN Denial-of-ServiceCVE-2018-0154IOS SoftwareHoch 7,57,1%
03.03.2022IOS Software and Cisco IOS XE Software Quality of Service Remote Code ExecutionCVE-2018-0151IOS and IOS XE SoftwareKritisch 9,814%
03.03.2022SNMP Remote Code ExecutionCVE-2017-6744IOS softwareHoch 8,87,3%
03.03.2022SNMP Remote Code ExecutionCVE-2017-6743IOS and IOS XE SoftwareHoch 8,811%
03.03.2022SNMP Remote Code ExecutionCVE-2017-6740IOS and IOS XE SoftwareHoch 8,811%
03.03.2022SNMP Remote Code ExecutionCVE-2017-6739IOS and IOS XE SoftwareHoch 8,811%
03.03.2022SNMP Remote Code ExecutionCVE-2017-6738IOS and IOS XE SoftwareHoch 8,811%
03.03.2022SNMP Remote Code ExecutionCVE-2017-6737IOS and IOS XE SoftwareHoch 8,845%
03.03.2022SNMP Remote Code ExecutionCVE-2017-6736IOS and IOS XE SoftwareHoch 8,870%
03.03.2022IOS Software and Cisco IOS XE Software Denial-of-ServiceCVE-2017-6663IOS and IOS XE SoftwareMittel 6,52,1%
03.03.2022IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-ServiceCVE-2017-6627IOS and IOS XE SoftwareHoch 7,56,2%
03.03.2022Ethernet Virtual Private Network Border Gateway Protocol Denial-of-ServiceCVE-2017-12319IOS XE SoftwareMittel 5,95,2%
03.03.2022DHCP Remote Code ExecutionCVE-2017-12240IOS and IOS XE SoftwareKritisch 9,814%
03.03.2022VPLS Denial-of-ServiceCVE-2017-12238Catalyst 6800 Series SwitchesMittel 6,52,0%
03.03.2022Internet Key Exchange Denial-of-ServiceCVE-2017-12237IOS and IOS XE SoftwareHoch 7,57,1%
03.03.2022for Cisco Industrial Ethernet Switches PROFINET Denial-of-ServiceCVE-2017-12235IOS softwareHoch 7,57,1%
03.03.2022Common Industrial Protocol Request Denial-of-ServiceCVE-2017-12234IOS softwareHoch 7,57,1%
03.03.2022Common Industrial Protocol Request Denial-of-ServiceCVE-2017-12233IOS softwareHoch 7,57,1%
03.03.2022for Cisco Integrated Services Routers Denial-of-ServiceCVE-2017-12232IOS softwareMittel 6,52,2%
03.03.2022Network Address Translation Denial-of-ServiceCVE-2017-12231IOS softwareHoch 7,57,1%
03.11.2021Data Platform Command InjectionCVE-2021-1498HyperFlex HXKritisch 9,8>99,9%
03.11.2021Installer Virtual Machine Command InjectionCVE-2021-1497HyperFlex HXKritisch 9,899,9%
03.11.2021ASA and FTD Cross-Site Scripting (XSS)CVE-2020-3580von Ransomware genutztAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Mittel 6,186%
03.11.2021Software DVMRP Memory ExhaustionCVE-2020-3569IOS XRHoch 8,63,3%
03.11.2021Software DVMRP Memory ExhaustionCVE-2020-3566IOS XRHoch 8,63,7%
03.11.2021ASA and FTD Read-Only Path TraversalCVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Hoch 7,5>99,9%
03.11.2021IP Phones Web Server Remote Code Execution and Denial-of-ServiceCVE-2020-3161Cisco IP PhonesKritisch 9,884%
03.11.2021Software Discovery Protocol Format StringCVE-2020-3118IOS XRHoch 8,812%
03.11.2021Information DisclosureCVE-2019-1653Small Business RV320 and RV325 RoutersHoch 7,599,9%
03.11.2021Denial-of-ServiceCVE-2018-0296Adaptive Security Appliance (ASA)Hoch 7,599,9%
03.11.2021Software Smart Install Remote Code ExecutionCVE-2018-0171IOS and IOS XEHoch 7,599,5%

Quellen: Known Exploited Vulnerabilities (CISA, gemeinfrei), CVE records (cve.org) und EPSS (FIRST). Die Angriffswahrscheinlichkeit ist die EPSS-Schätzung, dass jemand in den nächsten 30 Tagen versucht, die Schwachstelle auszunutzen.