Vulnerabilities > Cisco > IOS XE > 16.2.2a

DATE CVE VULNERABILITY TITLE RISK
2017-09-29 CVE-2017-12228 Improper Certificate Validation vulnerability in Cisco IOS and IOS XE
A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate.
network
high complexity
cisco CWE-295
5.9
2017-09-29 CVE-2017-12222 Improper Input Validation vulnerability in Cisco IOS XE
A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service (DoS) condition.
low complexity
cisco CWE-20
6.5