17.1.1a

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-13	CVE-2021-1223	Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. network low complexity cisco snort	7.5
2020-09-24	CVE-2020-3425	Unspecified vulnerability in Cisco IOS XE Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. network low complexity cisco	8.8
2020-09-24	CVE-2020-3417	OS Command Injection vulnerability in Cisco IOS XE A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to execute persistent code at boot time and break the chain of trust. local low complexity cisco CWE-78	6.7