Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2017-12233 | There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an… | Cisco / IOS software | Mar 3, 2022 | — | View → |
| CVE-2017-12234 | There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an… | Cisco / IOS software | Mar 3, 2022 | — | View → |
| CVE-2017-12235 | A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an… | Cisco / IOS software | Mar 3, 2022 | — | View → |
| CVE-2017-12237 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-12238 | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an… | Cisco / Catalyst 6800 Series Switches | Mar 3, 2022 | — | View → |
| CVE-2017-12240 | The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-12319 | A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow… | Cisco / IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6627 | A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6663 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6736 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6737 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6738 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6739 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6740 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6743 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2017-6744 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote… | Cisco / IOS software | Mar 3, 2022 | — | View → |
| CVE-2017-8540 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2… | Microsoft / Malware Protection Engine | Mar 3, 2022 | — | View → |
| CVE-2018-0151 | A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0154 | A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an… | Cisco / IOS Software | Mar 3, 2022 | — | View → |
| CVE-2018-0155 | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco… | Cisco / Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Mar 3, 2022 | — | View → |