CWE-371 is a common weakness enumeration in software security. This database tracks 7 CVE vulnerabilities classified under this weakness type.

How many CVEs are classified as CWE-371?

There are 7 CVE vulnerabilities classified as CWE-371 with an average CVSS score of 7.7285714285714.

What is the severity distribution for CWE-371?

CWE-371 contains 0 critical, 6 high, 1 medium, and 0 low severity vulnerabilities.

CWE-371

Total CVEs

Vulnerabilities

Avg CVSS v3

7.7

High

Avg CVSS v2

6.1

Medium

Latest CVE

2024

Most Recent

Severity Distribution

Critical 0

High 6

85.7%

Medium 1

14.3%

Low 0

External References

MITRE CWE

Official CWE definition

NIST NVD

Search CVEs by CWE

All CVEs (7)

Page 1 of 1

CVE-2024-20455

HIGH

CVSS:8.6(High)

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote at...

CWE-3712024

CVE-2020-3422

HIGH

CVSS:8.6(High)

A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to reuse an existing po...

CWE-3712020

CVE-2020-3200

HIGH

CVSS:7.7(High)

A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerabi...

CWE-3712020

CVE-2020-3574

HIGH

CVSS:7.5(High)

A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected ca...

CWE-3712020

CVE-2019-1977

HIGH

CVSS:7.5(High)

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cau...

CWE-3712019

CVE-2020-3385

HIGH

CVSS:7.4(High)

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected s...

CWE-3712020

CVE-2018-0282

MEDIUM

CVSS:6.8(Medium)

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condi...

CWE-3712018