{"schema_version":"1","data":[{"id":3527,"advisory_id":"c0d95c08-61ba-4f23-ba7f-8abab1dd1212","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0171","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:28.905361+00:00","extraction_method":"structured","technologies":["core-kev","ios-and-ios-xe"],"cve_ids":["CVE-2018-0171"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","summary":"Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-0171","products":[{"name":{"value":"IOS and IOS XE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-0171","aliases":["CVE-2018-0171"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2018-0171","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0171","dueDate":"2022-05-03","product":"IOS and IOS XE","dateAdded":"2021-11-03","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.","vulnerabilityName":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-0171","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2720,"advisory_id":"3cc8939c-5966-4612-9ce1-9306b1243d03","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-3881","source_published_at":"2022-03-25T00:00:00+00:00","published_at":"2026-10-24T21:23:32.082006+00:00","extraction_method":"structured","technologies":["core-kev","ios-and-ios-xe"],"cve_ids":["CVE-2017-3881"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","summary":"A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-3881","products":[{"name":{"value":"IOS and IOS XE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-3881","aliases":["CVE-2017-3881"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2017-3881","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-3881","dueDate":"2022-04-15","product":"IOS and IOS XE","dateAdded":"2022-03-25","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges.","vulnerabilityName":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-3881","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1238,"advisory_id":"84df0d38-5418-457a-b2f9-f4ac8bc551ef","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20109","source_published_at":"2023-10-10T00:00:00+00:00","published_at":"2026-10-24T20:58:44.275615+00:00","extraction_method":"structured","technologies":["core-kev","ios-and-ios-xe"],"cve_ids":["CVE-2023-20109"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","summary":"Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-20109","products":[{"name":{"value":"IOS and IOS XE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-20109","aliases":["CVE-2023-20109"],"affected":[],"modified":"2023-10-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2023-20109","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-getvpn-rce-g8qR68sx;  https://nvd.nist.gov/vuln/detail/CVE-2023-20109","dueDate":"2023-10-31","product":"IOS and IOS XE","dateAdded":"2023-10-10","vendorProject":"Cisco","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash.","vulnerabilityName":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-20109","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":339,"advisory_id":"e11edf7d-dfdb-42ad-962a-1c85174fcdb8","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352","source_published_at":"2025-09-29T00:00:00+00:00","published_at":"2026-10-24T20:44:24.651167+00:00","extraction_method":"structured","technologies":["core-kev","ios-and-ios-xe"],"cve_ids":["CVE-2025-20352"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","summary":"Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2025-20352","products":[{"name":{"value":"IOS and IOS XE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-20352","aliases":["CVE-2025-20352"],"affected":[],"modified":"2025-09-29T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-121"],"cveID":"CVE-2025-20352","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte ; https://nvd.nist.gov/vuln/detail/CVE-2025-20352","dueDate":"2025-10-20","product":"IOS and IOS XE","dateAdded":"2025-09-29","vendorProject":"Cisco","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2025-20352","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3527,"next_before":339}