Ios
Vendor:
First CVE: Dec 10, 1992 · Active for 33 years
616
Total CVEs
More Total CVEs than 100% of tracked products
19.9
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
6.3%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Ios over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 10, 1992
33 years ago
Most Recent CVE
Sep 25, 2025
302 days ago
CVE Severity & Scoring
Ios616 CVEs
39%
58%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local23 (3.7%)
Network163 (26.5%)
Unknown397 (64.4%)
Physical3 (0.5%)
Adjacent Network30 (4.9%)
Attack Complexity
Low195 (31.7%)
High24 (3.9%)
Unknown397 (64.4%)
User Interaction
None205 (33.3%)
Unknown397 (64.4%)
Required14 (2.3%)
Privileges Required
Low44 (7.1%)
High22 (3.6%)
None153 (24.8%)
Unknown397 (64.4%)
Top CVEs
Signals from CVEs in this product scope (616 CVEs).
616 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-3881CRITICAL A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a rel | Mar 17, 2017 | 9.8 | 99 | YES | YES |
CVE-2018-0171CRITICAL A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected devi | Mar 28, 2018 | 9.8 | 98 | YES | YES |
CVE-2016-6415HIGH The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote a | Sep 19, 2016 | 7.5 | 97 | YES | YES |
CVE-2017-6736HIGH The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to rem | Jul 17, 2017 | 8.8 | 94 | YES | YES |
CVE-2008-1447MEDIUM The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; an | Jul 8, 2008 | 6.8 | 87 | NO | YES |
CVE-2001-0537HIGH HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access | Jul 21, 2001 | 9.3 | 86 | NO | YES |
CVE-2025-20352HIGH A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:
An authenticated, remote | Sep 24, 2025 | 7.7 | 85 | YES | NO |
CVE-2002-1359HIGH Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary | Dec 23, 2002 | 10.0 | 85 | NO | YES |
CVE-2017-6737HIGH A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could | Jul 17, 2017 | 8.8 | 84 | YES | NO |
CVE-2008-4128MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to ex | Sep 18, 2008 | 4.3 | 79 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (616 CVEs).
CISA KEV
39 CVEs
6.3% of CVEs· 97th percentile
Metasploit
7 CVEs
1.1% of CVEs· 96th percentile
Nuclei
3 CVEs
0.5% of CVEs· 96th percentile
ExploitDB
31 CVEs
5.0% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (616 CVEs).
Media Mentions
Signals from CVEs in this product scope (616 CVEs).
Top CNAs Publishing CVEs For Ios
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| fd-1.5.0 | 1 | 7.4 | 1.1% | 0 | 0 |
| everest-16.5.1 | 1 | 8.6 | 1.6% | 0 | 0 |
| denali-16.3.6 | 1 | 8.6 | 1.6% | 0 | 0 |
| denali-16.3.4 | 1 | 8.6 | 7.8% | 1 | 0 |
| 9.14 | 4 | 5.3 | 9.2% | 0 | 0 |
| 9.1 | 6 | 6.2 | 6.8% | 0 | 0 |
| 9.0 | 4 | 6.6 | 9.7% | 0 | 0 |
| 8.3 | 4 | 6.6 | 9.7% | 0 | 0 |
| 8.2 | 4 | 6.6 | 9.7% | 0 | 0 |
| 7.2\(2\)22 | 2 | 5.5 | 5.5% | 0 | 1 |
| 7000 | 1 | 5.0 | 95.7% | 0 | 1 |
| 5.2.0.base | 1 | 8.8 | 3.4% | 1 | 0 |
| 4.1.2 | 4 | 6.0 | 9.4% | 0 | 0 |
| 4.1.1 | 4 | 6.0 | 9.4% | 0 | 0 |
| 4.1 | 5 | 6.3 | 7.7% | 0 | 0 |
| 3.6\(2\)e | 1 | 8.6 | 7.9% | 1 | 0 |
| 3.16.1 | 1 | 5.3 | 1.7% | 0 | 0 |
| 2.3 | 1 | 5.9 | 1.1% | 0 | 0 |
| 1.8.0 | 1 | 7.5 | 1.8% | 0 | 0 |
| 17.8.1 | 1 | 5.9 | 0.7% | 0 | 0 |