16.10.1

DATE	CVE	VULNERABILITY TITLE	RISK
2019-09-25	CVE-2019-12646	Improper Initialization vulnerability in Cisco IOS XE A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. network low complexity cisco CWE-665	7.5
2019-05-13	CVE-2019-1649	Improper Locking vulnerability in Cisco products A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. local low complexity cisco CWE-667	6.7
2019-03-28	CVE-2019-1747	Improper Input Validation vulnerability in Cisco IOS and IOS XE A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device. network low complexity cisco CWE-20	5.0