Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ios_xe:3.11.99ze:*:*:*:*:*:*:*

part: o version: 3.11.99ze update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIos Xe (e06dcf6a-4e40-54fa-8931-59bc15e7d5ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34699 vulnerable 2026-06-08 05:32:14.846300 Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability
HIGH (7.7)
A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this vulnerability by requesting a particular CLI command to be run through the web UI. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Published: 2021-09-23T02:25:42.458Z
Updated: 2024-11-18T20:47:47.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1620 vulnerable 2026-06-08 05:29:01.493073 Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability
HIGH (7.7)
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the code does not release the allocated IP address under certain failure conditions. An attacker could exploit this vulnerability by trying to connect to the device with a non-AnyConnect client. A successful exploit could allow the attacker to exhaust the IP addresses from the assigned local pool, which prevents users from logging in and leads to a denial of service (DoS) condition.
Published: 2021-09-23T02:31:01.213Z
Updated: 2024-11-07T21:51:30.491Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.