What’s Vulnerable › Products

Cisco IOS XE SD-WAN Software vulnerabilities

26 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Cisco IOS XE SD-WAN Software version is affected

Exploited Cisco IOS XE SD-WAN Software vulnerabilities

• CVE-2025-20352 — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Latest Cisco IOS XE SD-WAN Software vulnerabilities

• CVE-2025-20352 — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability (CVSS 7.7) — exploited
• CVE-2025-20151 — Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability (CVSS 4.3)
• CVE-2024-20373 — Cisco IOS and Cisco IOS XE SNMP Extended ACL Bypass Vulnerability (CVSS 5.3)
• CVE-2024-20455 — (CVSS 8.6)
• CVE-2023-20035 — Cisco IOS XE SD-WAN Software Command Injection Vulnerability (CVSS 7.8)
• CVE-2022-20850 — Cisco SD-WAN Arbitrary File Deletion Vulnerability (CVSS 7.1)
• CVE-2021-1529 — Cisco IOS XE SD-WAN Software Command Injection Vulnerability (CVSS 7.8)
• CVE-2021-34729 — Cisco IOS XE SD-WAN Software Command Injection Vulnerability (CVSS 6.7)
• CVE-2021-34727 — Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability (CVSS 9.8)
• CVE-2021-34725 — Cisco IOS XE SD-WAN Software Command Injection Vulnerability (CVSS 6.7)
• CVE-2021-34724 — Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability (CVSS 6.0)
• CVE-2021-1619 — Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability (CVSS 9.1)
• CVE-2021-1371 — Cisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability (CVSS 6.6)
• CVE-2021-1454 — Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities (CVSS 6.7)
• CVE-2021-1432 — Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability (CVSS 7.3)
• CVE-2021-1383 — Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities (CVSS 6.7)
• CVE-2021-1241 — Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 7.5)
• CVE-2021-1305 — Cisco SD-WAN vManage Authorization Bypass Vulnerabilities (CVSS 4.3)
• CVE-2021-1301 — Cisco SD-WAN Buffer Overflow Vulnerabilities (CVSS 9.8)
• CVE-2021-1300 — Cisco SD-WAN Buffer Overflow Vulnerabilities (CVSS 9.8)
• CVE-2021-1279 — Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6)
• CVE-2021-1278 — Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 7.5)
• CVE-2021-1274 — Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6)
• CVE-2021-1273 — Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6)
• CVE-2020-3375 — Cisco SD-WAN Solution Software Buffer Overflow Vulnerability (CVSS 9.8)