17.3.6

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-12	CVE-2023-20076	OS Command Injection vulnerability in Cisco products A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. network low complexity cisco CWE-78	8.8
2021-09-23	CVE-2021-1616	Unspecified vulnerability in Cisco IOS XE A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass the ALG. network low complexity cisco	4.7
2021-09-23	CVE-2021-1623	Unspecified vulnerability in Cisco IOS XE A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadband Routers could allow an authenticated, remote attacker to overload a device punt path, resulting in a denial of service (DoS) condition. network low complexity cisco	7.7
2021-01-13	CVE-2021-1224	Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. network low complexity cisco snort	5.3