16.9.1

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-10	CVE-2022-20920	Improper Handling of Exceptional Conditions vulnerability in Cisco IOS A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. network low complexity cisco CWE-755	7.7
2021-09-23	CVE-2021-34703	Improper Initialization vulnerability in Cisco IOS A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. network low complexity cisco CWE-665	6.5
2019-09-25	CVE-2019-12672	Link Following vulnerability in Cisco IOS 16.9.1 A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical access to an affected device to execute arbitrary code on the underlying operating system (OS) with root privileges. low complexity cisco CWE-59	6.8
2019-09-25	CVE-2019-12655	Classic Buffer Overflow vulnerability in Cisco IOS A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall (ZBFW) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. network low complexity cisco CWE-120	7.5
2019-09-25	CVE-2019-12649	Improper Verification of Cryptographic Signature vulnerability in Cisco IOS and IOS XE A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. local low complexity cisco CWE-347	6.7
2019-03-28	CVE-2019-1756	Improper Input Validation vulnerability in Cisco IOS and IOS XE A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. network low complexity cisco CWE-20	7.2