[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqhRBDq5EKxQl3isp2mMkcO8NOIthw8hcmYhj4uGIvME":3,"g5a-family:cisco\u002F1120":95,"g5a-ex:cisco\u002F1120@*":105},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":67,"seoMetadata":74,"meta":92},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","1120",0,10,2,"2021-09-23",[],"1120 by Cisco is a technology product and 10 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,28,36,39,44,48,54,58,62],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2017-12234","Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.","2017-09-29",7.5,"v3.1","High",0.0707,{"cveId":26,"description":27,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2017-12233","Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuz95334.",{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":22,"severity":33,"isKev":34,"epssScore":35},"CVE-2020-3258","Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute arbitrary code on an affected system or cause an affected system to crash and reload. For more information about these vulnerabilities, see the Details section of this advisory.","2020-06-03",9.8,"Critical",false,0.04646,{"cveId":37,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":22,"severity":33,"isKev":34,"epssScore":38},"CVE-2020-3198",0.04471,{"cveId":40,"description":41,"publishedDate":31,"cvssScore":42,"cvssVersion":22,"severity":23,"isKev":34,"epssScore":43},"CVE-2020-3205","A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, adjacent attacker to execute arbitrary shell commands on the Virtual Device Server (VDS) of an affected device. The vulnerability is due to insufficient validation of signaling packets that are destined to VDS. An attacker could exploit this vulnerability by sending malicious packets to an affected device. A successful exploit could allow the attacker to execute arbitrary commands in the context of the Linux shell of VDS with the privileges of the root user. Because the device is designed on a hypervisor architecture, exploitation of a vulnerability that affects the inter-VM channel may lead to a complete system compromise. For more information about this vulnerability, see the Details section of this advisory.",8.8,0.00992,{"cveId":45,"description":46,"publishedDate":31,"cvssScore":42,"cvssVersion":22,"severity":23,"isKev":34,"epssScore":47},"CVE-2020-3199","Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.",0.00681,{"cveId":49,"description":50,"publishedDate":31,"cvssScore":51,"cvssVersion":22,"severity":52,"isKev":34,"epssScore":53},"CVE-2020-3210","A vulnerability in the CLI parsers of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated, local attacker to execute arbitrary shell commands on the Virtual Device Server (VDS) of an affected device. The attacker must have valid user credentials at privilege level 15. The vulnerability is due to insufficient validation of arguments that are passed to specific VDS-related CLI commands. An attacker could exploit this vulnerability by authenticating to the targeted device and including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands in the context of the Linux shell of VDS with the privileges of the root user.",6.7,"Medium",0.00445,{"cveId":55,"description":56,"publishedDate":31,"cvssScore":42,"cvssVersion":22,"severity":23,"isKev":34,"epssScore":57},"CVE-2020-3234","A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated but low-privileged, local attacker to log in to the Virtual Device Server (VDS) of an affected device by using a set of default credentials. The vulnerability is due to the presence of weak, hard-coded credentials. An attacker could exploit this vulnerability by authenticating to the targeted device and then connecting to VDS through the device’s virtual console by using the static credentials. A successful exploit could allow the attacker to access the Linux shell of VDS as the root user.",0.00352,{"cveId":59,"description":60,"publishedDate":31,"cvssScore":51,"cvssVersion":22,"severity":52,"isKev":34,"epssScore":61},"CVE-2020-3208","A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient access restrictions on the area of code that manages the image verification feature. An attacker could exploit this vulnerability by first authenticating to the targeted device and then logging in to the Virtual Device Server (VDS) of an affected device. The attacker could then, from the VDS shell, disable Cisco IOS Software integrity (image) verification. A successful exploit could allow the attacker to boot a malicious Cisco IOS Software image on the targeted device. To exploit this vulnerability, the attacker must have valid user credentials at privilege level 15.",0.00321,{"cveId":63,"description":64,"publishedDate":12,"cvssScore":65,"cvssVersion":22,"severity":23,"isKev":34,"epssScore":66},"CVE-2021-1419","A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.",7.8,0.00216,[68,73],{"cveId":26,"description":27,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":69,"cisaDateAdded":70,"cisaShortDescription":71,"cisaRequiredAction":72},"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","2022-03-03","There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.","Apply updates per vendor instructions.",{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":69,"cisaDateAdded":70,"cisaShortDescription":71,"cisaRequiredAction":72},{"title":75,"metaDescription":76,"keywords":77,"structuredData":78},"1120 by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for 1120 by Cisco with 10 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","1120 vulnerabilities, 1120 security, 1120 CVE, Cisco 1120, 1120 threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, 1120 KEV, 1120 exploited vulnerabilities",{"@context":79,"@type":80,"name":8,"description":76,"url":81,"manufacturer":82,"applicationCategory":86,"softwareVersion":87,"mainEntity":88},"https:\u002F\u002Fschema.org","SoftwareApplication","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002F1120",{"@type":83,"name":84,"url":85},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":89,"name":90,"description":91,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","1120 Security Vulnerabilities","Security vulnerabilities affecting 1120 by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":93,"apiVersion":94},"2026-10-18T21:22:42.267Z","3.0",[96,99,102],{"product":97,"cves":98},"1120_integrated_services_router",51,{"product":100,"cves":101},"1120_connected_grid_router",6,{"product":103,"cves":104},"1120_firmware",1,{"rows":106,"total":11,"capped":34,"failed":9},[107,111],{"cveId":26,"name":69,"severity":23,"cvss":21,"added":70,"epss":24,"published":108,"ranges":109,"checked":4,"hits":110,"covers":34},"2017-09-29T01:34:48.827",[],[],{"cveId":18,"name":69,"severity":23,"cvss":21,"added":70,"epss":24,"published":112,"ranges":113,"checked":4,"hits":114,"covers":34},"2017-09-29T01:34:48.857",[],[]]