Skip to content
COOEY

FAIL › dossier

IOS XE Software

PRODUCT

· dossier confidence 90%

IOS XE Software is the operating system for Cisco routers and switches with a documented history of high-severity, actively exploited vulnerabilities in core protocols like DHCP and BGP that were not patched in a timely manner.

Failure events
2
Zero-days
0
RCEs
0
On KEV
2
Critical
0
Worst shame
72
PROFILE
CategorynetworkingWhat they doIOS XE Software is the operating system for Cisco routers and switches.
SECURITY POSTURE

The software has a documented history of high-severity vulnerabilities that were actively exploited before patches were applied, indicating a track record of delayed patching and insufficient input validation in core protocols.

Notable failures
  • CVE-2018-0174: DHCP option 82 DoS via unpatched, exploited vulnerability
  • CVE-2017-12319: EVPN BGP remote unauthenticated reboot and routing corruption
Patterns: repeated unpatched edge-device RCEs and DoS; improper input validation in core protocols
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-03-03 CVE-2018-0174 high Cisco IOS XE DHCP option 82 improper input validation allows denial-of-service via unpatched, actively exploited vulnerability.
2022-03-03 CVE-2017-12319 high Cisco IOS XE EVPN BGP vulnerability allows remote unauthenticated attackers to cause device reboots or corrupt routing tables, leading to network instability.
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-16 04:51:18.528822+00:00