Cisco Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Cisco Small Business RV Series Router Firmware262 vulnerabilities
Cisco IOS XE Software248 vulnerabilities
Cisco Firepower Threat Defense Software161 vulnerabilities
Cisco Adaptive Security Appliance (ASA) Software160 vulnerabilities
Cisco Identity Services Engine Software156 vulnerabilities
Cisco Firepower Management Center128 vulnerabilities
Cisco IOS XR Software107 vulnerabilities
Cisco NX-OS Software88 vulnerabilities
Cisco Data Center Network Manager74 vulnerabilities
Cisco SD-WAN vManage61 vulnerabilities
Cisco SD-WAN Solution54 vulnerabilities
Cisco Unified Communications Manager52 vulnerabilities
Cisco Prime Infrastructure50 vulnerabilities
Cisco Secure Firewall Threat Defense (FTD) Software48 vulnerabilities
Cisco Webex Meetings46 vulnerabilities
Cisco Catalyst SD-WAN Manager45 vulnerabilities
IOS41 vulnerabilities
Cisco Enterprise NFV Infrastructure Software39 vulnerabilities
Cisco IOS36 vulnerabilities
Cisco Unified Contact Center Express36 vulnerabilities
Cisco WebEx WRF Player35 vulnerabilities
Cisco Digital Network Architecture Center (DNA Center)33 vulnerabilities
Cisco Unified Computing System (Managed)33 vulnerabilities
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software31 vulnerabilities
Cisco Unity Connection31 vulnerabilities

Cisco vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2013-7030HIGH	Cisco Unified Communications Manager - TFTP Service The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly disputes the significance of this report, stating that this is an expected default behavior, and that the product's documentation describes use of the TFTP Encrypted Config option in addressing this is… CWE-310Dec 12, 2013	CVSS7.3v3.1	EPSS5.17%	PoCs1	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX