Cisco: 악용된 취약점
- 101악용된 취약점
- 7랜섬웨어에 사용됨
- 2026. 10. 14.가장 최근 추가
- IOS and IOS XE Software 14
- Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 6
- IOS XR 6
- IOS software 6
- Catalyst SD-WAN Manager 5
- Small Business RV160, RV260, RV340, and RV345 Series Routers 5
- IOS and IOS XE 4
- Adaptive Security Appliance (ASA) 4
- IOS Software 4
- Identity Services Engine 3
- IOS Software and Cisco IOS XE Software 3
- Secure Email Gateway 2
- Secure Firewall Management Center (FMC) 2
- IOS 2
- Unified Communications Manager 2
- Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 2
- AnyConnect Secure 2
- IOS, XR, and XE Software 2
- IOS XE Software 2
- HyperFlex HX 2
- Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management 1
- Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) 1
- Catalyst SD-WAN 1
- Catalyst SD-WAN Manger 1
- Catalyst SD-WAN Controller and Manager 1
- SD-WAN 1
- Multiple Products 1
- Smart Licensing Utility 1
- Small Business RV Series Routers 1
- NX-OS 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 14. | Relative Path Traversal | Secure Email Gateway | 치명적 9.8 | 2.2% |
| 2026. 9. 30. | Hex Encoding | Catalyst SD-WAN Manager | 치명적 9.8 | 39% |
| 2026. 9. 16. | Incorrect Use of Privileged APIs | Identity Services Engine | 치명적 10.0 | 76% |
| 2026. 9. 14. | SQL Injection | Secure Email Gateway | 치명적 9.8 | 30% |
| 2026. 9. 9. | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 치명적 10.0 | 88% |
| 2026. 8. 11. | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 높음 8.6 | 1.0% |
| 2026. 7. 29. | Secure Firewall Management Center Use of Hard-coded Password | Secure Firewall Management Center (FMC) | 보통 5.3 | 35% |
| 2026. 7. 13. | Cross-Site Request Forgery | IOS | 높음 8.1 | 34% |
| 2026. 6. 25. | Server-Side Request Forgery (SSRF) | Unified Communications Manager | 높음 8.6 | 88% |
| 2026. 6. 15. | Directory or Path Traversal | Catalyst SD-WAN Manager | 보통 6.5 | 29% |
| 2026. 6. 9. | Improper Encoding or Escaping of Output | Catalyst SD-WAN Manager | 높음 7.8 | 25% |
| 2026. 5. 14. | Controller Authentication Bypass | Catalyst SD-WAN | 치명적 10.0 | 92% |
| 2026. 4. 20. | Exposure of Sensitive Information to an Unauthorized Actor | Catalyst SD-WAN Manager | 보통 6.5 | 31% |
| 2026. 4. 20. | Storing Passwords in a Recoverable Format | Catalyst SD-WAN Manager | 높음 7.5 | 7.3% |
| 2026. 4. 20. | Catalyst SD-WAN Manager Incorrect Use of Privileged APIs | Catalyst SD-WAN Manger | 보통 5.4 | 26% |
| 2026. 3. 19. | Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data | Secure Firewall Management Center (FMC) | 치명적 10.0 | 43% |
| 2026. 2. 25. | Authentication Bypass | Catalyst SD-WAN Controller and Manager | 치명적 10.0 | 89% |
| 2026. 2. 25. | Path Traversal | SD-WAN | 높음 7.8 | 12% |
| 2026. 1. 21. | Unified Communications Products Code Injection | Unified Communications Manager | 높음 8.2 | 4.5% |
| 2025. 12. 17. | Improper Input Validation | Multiple Products | 치명적 10.0 | 32% |
| 2025. 9. 29. | Software SNMP Denial of Service and Remote Code Execution | IOS and IOS XE | 높음 7.7 | 42% |
| 2025. 9. 25. | Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 보통 6.5 | 87% |
| 2025. 9. 25. | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 치명적 9.9 | 71% |
| 2025. 7. 28. | Injection | Identity Services Engine | 치명적 10.0 | 74% |
| 2025. 7. 28. | Injection | Identity Services Engine | 치명적 10.0 | 98% |
| 2025. 3. 31. | Static Credential | Smart Licensing Utility | 치명적 9.8 | 97% |
| 2025. 3. 3. | Command Injection | Small Business RV Series Routers | 보통 6.5 | 54% |
| 2024. 11. 12. | Cross-Site Scripting (XSS) | Adaptive Security Appliance (ASA) | 보통 5.4 | 23% |
| 2024. 10. 24. | ASA and FTD Denial-of-Service | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 보통 5.8 | 16% |
| 2024. 7. 2. | Command Injection | NX-OS | 보통 6.0 | 4.3% |
| 2024. 4. 24. | ASA and FTD Privilege Escalation | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 보통 6.0 | 19% |
| 2024. 4. 24. | ASA and FTD Denial of Service | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 높음 8.6 | 70% |
| 2024. 2. 15. | ASA and FTD Information Disclosure | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 높음 7.5 | 72% |
| 2023. 10. 23. | IOS XE Web UI Command Injection | Cisco IOS XE Web UI | 높음 7.2 | 93% |
| 2023. 10. 16. | Privilege Escalation | IOS XE Web UI | 치명적 10.0 | 99.6% |
| 2023. 10. 10. | Group Encrypted Transport VPN Out-of-Bounds Write | IOS and IOS XE | 보통 6.6 | 2.5% |
| 2023. 9. 13. | Unauthorized Access | Adaptive Security Appliance and Firepower Threat Defense | 보통 5.0 | 27% |
| 2023. 5. 19. | IKEv1 Information Disclosure | IOS, IOS XR, and IOS XE | 높음 7.5 | 88% |
| 2023. 5. 19. | Denial-of-Service | IOS | 보통 5.9 | 4.8% |
| 2023. 4. 19. | SNMP Remote Code Execution | IOS and IOS XE Software | 높음 8.8 | 21% |
| 2022. 10. 24. | Mobility Client for Windows DLL Hijacking | AnyConnect Secure | 높음 7.8 | 10% |
| 2022. 10. 24. | Mobility Client for Windows Uncontrolled Search Path | AnyConnect Secure | 보통 6.5 | 28% |
| 2022. 6. 8. | Deserialization of Untrusted Data | RV Series Routers | 높음 8.8 | 5.5% |
| 2022. 5. 24. | CLI Remote Code Execution | Adaptive Security Appliance (ASA) | 높음 7.8 | 23% |
| 2022. 5. 24. | SNMP Buffer Overflow | Adaptive Security Appliance (ASA) | 높음 8.8 | 88% |
| 2022. 5. 23. | Open Port | IOS XR | 보통 6.5 | 11% |
| 2022. 3. 25. | Secure Access Control System Java Deserialization | Secure Access Control System (ACS) | 치명적 9.8 | 18% |
| 2022. 3. 25. | Remote Code Execution | VPN Routers | 치명적 9.8 | 55% |
| 2022. 3. 25. | Remote Code Execution | IOS and IOS XE | 치명적 9.8 | 99% |
| 2022. 3. 25. | Directory Traversal | Prime Data Center Network Manager (DCNM) | 높음 7.5 | 40% |
| 2022. 3. 25. | Border Gateway Protocol (BGP) Denial-of-Service | IOS XR | 높음 7.5 | 5.7% |
| 2022. 3. 25. | Border Gateway Protocol (BGP) Denial-of-Service | IOS XR | 보통 5.9 | 3.3% |
| 2022. 3. 3. | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | 치명적 10.0 | 15% |
| 2022. 3. 3. | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | 치명적 10.0 | 9.2% |
| 2022. 3. 3. | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | 치명적 10.0 | 9.7% |
| 2022. 3. 3. | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | 치명적 10.0 | 5.7% |
| 2022. 3. 3. | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | 치명적 10.0 | 72% |
| 2022. 3. 3. | Small Business Routers Improper Input Validation | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 높음 7.2 | 96% |
| 2022. 3. 3. | Denial-of-Service | IOS Software | 보통 6.8 | 4.9% |
| 2022. 3. 3. | Denial-of-Service | IOS Software | 보통 6.8 | 4.9% |
| 2022. 3. 3. | Buffer Overflow | IOS, XR, and XE Software | 높음 8.0 | 3.5% |
| 2022. 3. 3. | IOS Software and Cisco IOS XE Software Improper Input Validation | IOS XE Software | 높음 8.6 | 7.6% |
| 2022. 3. 3. | Improper Input Validation | IOS and IOS XE Software | 높음 8.6 | 7.6% |
| 2022. 3. 3. | Improper Input Validation | IOS and IOS XE Software | 높음 8.6 | 7.8% |
| 2022. 3. 3. | Buffer Overflow | IOS, XR, and XE Software | 높음 8.8 | 3.4% |
| 2022. 3. 3. | Resource Management Errors | IOS Software | 보통 6.3 | 4.1% |
| 2022. 3. 3. | IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service | IOS Software and Cisco IOS XE Software | 높음 7.5 | 6.9% |
| 2022. 3. 3. | IOS and XE Software Internet Key Exchange Memory Leak | IOS Software and Cisco IOS XE Software | 높음 8.6 | 7.2% |
| 2022. 3. 3. | Smart Install Denial-of-Service | IOS Software and Cisco IOS XE Software | 높음 7.5 | 9.4% |
| 2022. 3. 3. | Catalyst Bidirectional Forwarding Detection Denial-of-Service | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 높음 8.6 | 7.7% |
| 2022. 3. 3. | Integrated Services Module for VPN Denial-of-Service | IOS Software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution | IOS and IOS XE Software | 치명적 9.8 | 14% |
| 2022. 3. 3. | SNMP Remote Code Execution | IOS software | 높음 8.8 | 7.3% |
| 2022. 3. 3. | SNMP Remote Code Execution | IOS and IOS XE Software | 높음 8.8 | 11% |
| 2022. 3. 3. | SNMP Remote Code Execution | IOS and IOS XE Software | 높음 8.8 | 11% |
| 2022. 3. 3. | SNMP Remote Code Execution | IOS and IOS XE Software | 높음 8.8 | 11% |
| 2022. 3. 3. | SNMP Remote Code Execution | IOS and IOS XE Software | 높음 8.8 | 11% |
| 2022. 3. 3. | SNMP Remote Code Execution | IOS and IOS XE Software | 높음 8.8 | 45% |
| 2022. 3. 3. | SNMP Remote Code Execution | IOS and IOS XE Software | 높음 8.8 | 70% |
| 2022. 3. 3. | IOS Software and Cisco IOS XE Software Denial-of-Service | IOS and IOS XE Software | 보통 6.5 | 2.1% |
| 2022. 3. 3. | IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service | IOS and IOS XE Software | 높음 7.5 | 6.2% |
| 2022. 3. 3. | Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service | IOS XE Software | 보통 5.9 | 5.2% |
| 2022. 3. 3. | DHCP Remote Code Execution | IOS and IOS XE Software | 치명적 9.8 | 14% |
| 2022. 3. 3. | VPLS Denial-of-Service | Catalyst 6800 Series Switches | 보통 6.5 | 2.0% |
| 2022. 3. 3. | Internet Key Exchange Denial-of-Service | IOS and IOS XE Software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service | IOS software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | Common Industrial Protocol Request Denial-of-Service | IOS software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | Common Industrial Protocol Request Denial-of-Service | IOS software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | for Cisco Integrated Services Routers Denial-of-Service | IOS software | 보통 6.5 | 2.2% |
| 2022. 3. 3. | Network Address Translation Denial-of-Service | IOS software | 높음 7.5 | 7.1% |
| 2021. 11. 3. | Data Platform Command Injection | HyperFlex HX | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | Installer Virtual Machine Command Injection | HyperFlex HX | 치명적 9.8 | 99.9% |
| 2021. 11. 3. | ASA and FTD Cross-Site Scripting (XSS) | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 보통 6.1 | 86% |
| 2021. 11. 3. | Software DVMRP Memory Exhaustion | IOS XR | 높음 8.6 | 3.3% |
| 2021. 11. 3. | Software DVMRP Memory Exhaustion | IOS XR | 높음 8.6 | 3.7% |
| 2021. 11. 3. | ASA and FTD Read-Only Path Traversal | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 높음 7.5 | >99.9% |
| 2021. 11. 3. | IP Phones Web Server Remote Code Execution and Denial-of-Service | Cisco IP Phones | 치명적 9.8 | 84% |
| 2021. 11. 3. | Software Discovery Protocol Format String | IOS XR | 높음 8.8 | 12% |
| 2021. 11. 3. | Information Disclosure | Small Business RV320 and RV325 Routers | 높음 7.5 | 99.9% |
| 2021. 11. 3. | Denial-of-Service | Adaptive Security Appliance (ASA) | 높음 7.5 | 99.9% |
| 2021. 11. 3. | Software Smart Install Remote Code Execution | IOS and IOS XE | 높음 7.5 | 99.5% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.