Home/Cisco/2900 series integrated services routers isr/CISCO2911R/K9

CISCO2911R/K9

Announced in: Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB

Cisco Chassis · 2900 series integrated services routers isr Series

Official Cisco notice (EOL11158) ↗ Retrieved 2026-09-27

Suggest a correction

CISCO2911R/K9 is dead. Cisco support ended 2022-12-31 (-1374d). Last available for order 2017-12-09.

Is the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB still supported?

No. Cisco ended support for the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB on 2022-12-31. No further security fixes will be issued. See Cisco's lifecycle bulletin.

When does the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB reach end of support?

Cisco support for the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB ends on 2022-12-31.

What replaces the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB?

Cisco has not published a successor model for the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB.

What known-exploited CVEs apply to the CISCO2911R/K9 past end of support?

36 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB runs. These will not be patched on this device because it is past the Cisco security-support date. See the Known Exploited Vulnerabilities table below for the full list.

Known Exploited Vulnerabilities

This device is past Cisco's security-support date. 36 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Cisco is not issuing patches for this model. Isolate, compensate, or refresh.

CVE	KEV added	Vulnerability
`CVE-2008-4128`	2026-07-13	Cisco IOS Cross-Site Request Forgery Vulnerability Advisory 1 Advisory 2 Advisory 3
`CVE-2025-20352`	2025-09-29	Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Advisory 1 Advisory 2
`CVE-2023-20109`	2023-10-10	Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Advisory 1 Advisory 2
`CVE-2004-1464`	2023-05-19	Cisco IOS Denial-of-Service Vulnerability Advisory 1 Advisory 2
`CVE-2016-6415`	2023-05-19	Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Advisory 1 Advisory 2
`CVE-2017-6742`	2023-04-19	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Advisory 1 Advisory 2
`CVE-2017-3881`	2022-03-25	Cisco IOS and IOS XE Remote Code Execution Vulnerability Advisory 1
`CVE-2018-0180`	2022-03-03	Cisco IOS Software Denial-of-Service Vulnerability Advisory 1
`CVE-2018-0179`	2022-03-03	Cisco IOS Software Denial-of-Service Vulnerability Advisory 1
`CVE-2018-0175`	2022-03-03	Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Advisory 1
`CVE-2018-0173`	2022-03-03	Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Advisory 1
`CVE-2018-0172`	2022-03-03	Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Advisory 1
`CVE-2018-0167`	2022-03-03	Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Advisory 1
`CVE-2018-0161`	2022-03-03	Cisco IOS Software Resource Management Errors Vulnerability Advisory 1
`CVE-2018-0159`	2022-03-03	Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Advisory 1
`CVE-2018-0158`	2022-03-03	Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Advisory 1
`CVE-2018-0156`	2022-03-03	Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Advisory 1
`CVE-2018-0154`	2022-03-03	Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability Advisory 1
`CVE-2018-0151`	2022-03-03	Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6744`	2022-03-03	Cisco IOS Software SNMP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6743`	2022-03-03	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6740`	2022-03-03	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6739`	2022-03-03	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6738`	2022-03-03	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6737`	2022-03-03	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6736`	2022-03-03	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-6663`	2022-03-03	Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Advisory 1
`CVE-2017-6627`	2022-03-03	Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Advisory 1
`CVE-2017-12240`	2022-03-03	Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability Advisory 1
`CVE-2017-12237`	2022-03-03	Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Advisory 1
`CVE-2017-12235`	2022-03-03	Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability Advisory 1
`CVE-2017-12234`	2022-03-03	Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Advisory 1
`CVE-2017-12233`	2022-03-03	Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Advisory 1
`CVE-2017-12232`	2022-03-03	Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability Advisory 1
`CVE-2017-12231`	2022-03-03	Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability Advisory 1
`CVE-2018-0171`	2021-11-03	Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Advisory 1

Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.

Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.

Announced 2016-09-09

End of Sale 2017-12-09

End of Support 2022-12-31

CISCO2911R/K9 Lifecycle Overview

The Cisco CISCO2911R/K9 (CISCO2911R/K9) is a chassis product in the Cisco 2900 series integrated services routers isr series. This product has reached end of life as of 2022-12-31, meaning Cisco no longer provides technical support, software updates, or hardware replacement for this product. It was last available for purchase on 2017-12-09. Organizations still running the CISCO2911R/K9 should plan a migration .

Lifecycle Milestones

Lifecycle notice published	2016-09-09	10y 1mo ago
End of sale	2017-12-09	8y 10mo ago
Last order date	2018-03-09	8y 7mo ago
End of software maintenance	2020-12-09	5y 10mo ago
End of failure analysis	2018-12-09	7y 10mo ago
End of security vulnerability support	2020-12-08	5y 10mo ago
Last date of support	2022-12-31	3y 9mo ago

Description

Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB

Applicable Platforms

2900 series integrated services routers isr

CISCO2911R/K9

Is the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB still supported?

When does the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB reach end of support?

What replaces the Cisco 2911 w/ 3 GE, 4 EHWIC, 2 DSP, 1 SM, 256MB CF, 512MB DRAM, IPB?

What known-exploited CVEs apply to the CISCO2911R/K9 past end of support?

Known Exploited Vulnerabilities

CISCO2911R/K9 Lifecycle Overview

Lifecycle Milestones

Other 2900 series integrated services routers isr Series SKUs

Sunsetting around the same time