16.9.5f

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-13	CVE-2021-1236	Always-Incorrect Control Flow Implementation vulnerability in multiple products Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. network low complexity cisco snort CWE-670	5.3
2021-01-13	CVE-2021-1224	Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. network low complexity cisco snort	5.3
2021-01-13	CVE-2021-1223	Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. network low complexity cisco snort	7.5
2020-11-06	CVE-2020-3444	Unspecified vulnerability in Cisco IOS XE A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. network low complexity cisco	5.0
2020-09-24	CVE-2020-3516	Improper Input Validation vulnerability in Cisco IOS XE A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. network low complexity cisco CWE-20	4.0
2020-09-24	CVE-2020-3425	Unspecified vulnerability in Cisco IOS XE Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. network low complexity cisco	8.8
2020-09-24	CVE-2020-3417	OS Command Injection vulnerability in Cisco IOS XE A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to execute persistent code at boot time and break the chain of trust. local low complexity cisco CWE-78	6.7
2020-06-03	CVE-2020-3229	Incorrect Authorization vulnerability in Cisco IOS XE A vulnerability in Role Based Access Control (RBAC) functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. network low complexity cisco CWE-863 critical	9.0
2020-06-03	CVE-2020-3225	Improper Input Validation vulnerability in Cisco IOS Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. network low complexity cisco CWE-20	7.8
2020-02-19	CVE-2019-1950	Insecure Default Initialization of Resource vulnerability in Cisco IOS XE A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. local low complexity cisco CWE-1188	8.4