# Cisco IOS XR Software.

Every CVE that names Cisco IOS XR Software among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20714.md)
  `CVE-2022-20714` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-126
- [Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-34771.md)
  `CVE-2021-34771` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.5 Medium · Not analysed yet · Published 9 Sept 2021 · Tags: Information disclosure
- [Cisco IOS XR Software DHCP Version 4 Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34737.md)
  `CVE-2021-34737` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 9 Sept 2021 · Tags: Memory corruption
- [Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34728.md)
  `CVE-2021-34728` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2021 · Tags: Command injection
- [Cisco IOS XR Software Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34722.md)
  `CVE-2021-34722` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 9 Sept 2021 · Tags: Command injection
- [Cisco IOS XR Software Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34721.md)
  `CVE-2021-34721` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 9 Sept 2021 · Tags: Command injection
- [Cisco IOS XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34720.md)
  `CVE-2021-34720` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2021 · Tags: CWE-771
- [Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34719.md)
  `CVE-2021-34719` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2021 · Tags: Command injection
- [Cisco IOS XR Software Arbitrary File Read and Write Vulnerability](https://agentprime.io/advisories/CVE-2021-34718.md)
  `CVE-2021-34718` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2021 · Tags: Command injection
- [Cisco IOS XR Software for ASR 9000 Series Routers Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34713.md)
  `CVE-2021-34713` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 9 Sept 2021 · Tags: CWE-399
- [Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34709.md)
  `CVE-2021-34709` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.0 Medium · Not analysed yet · Published 9 Sept 2021 · Tags: Weak cryptography or TLS
- [Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34708.md)
  `CVE-2021-34708` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.0 Medium · Not analysed yet · Published 9 Sept 2021 · Tags: Weak cryptography or TLS
- [Cisco IOS XR Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1485.md)
  `CVE-2021-1485` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.6 Medium · Not analysed yet · Published 8 Apr 2021 · Tags: Command injection
- [Cisco IOS XR Software Enf Broker Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1313.md)
  `CVE-2021-1313` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 4 Feb 2021 · Tags: CWE-399
- [Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1370.md)
  `CVE-2021-1370` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.8 High · Not analysed yet · Published 4 Feb 2021 · Tags: Command injection
- [Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1389.md)
  `CVE-2021-1389` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 4 Feb 2021 · Tags: Broken access control
- [Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1128.md)
  `CVE-2021-1128` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.5 Medium · Not analysed yet · Published 4 Feb 2021 · Tags: Information disclosure
- [Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1136.md)
  `CVE-2021-1136` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 4 Feb 2021 · Tags: Weak cryptography or TLS
- [Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1243.md)
  `CVE-2021-1243` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 4 Feb 2021 · Tags: Broken access control
- [Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1244.md)
  `CVE-2021-1244` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 4 Feb 2021 · Tags: Weak cryptography or TLS
- [Cisco IOS XR Software IPv6 Flood Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1268.md)
  `CVE-2021-1268` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 4 Feb 2021 · Tags: CWE-1076
- [Cisco IOS XR Software Enf Broker Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1288.md)
  `CVE-2021-1288` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 4 Feb 2021 · Tags: CWE-399
- [Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-26070.md)
  `CVE-2020-26070` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 12 Nov 2020 · Tags: Denial of service
- [Cisco IOS XR Software Enhanced Preboot eXecution Environment Unsigned Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-3284.md)
  `CVE-2020-3284` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.1 High · Not analysed yet · Published 6 Nov 2020 · Tags: Broken access control
- [Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2019-16019.md)
  `CVE-2019-16019` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2020 · Tags: CWE-399
- [Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2019-16021.md)
  `CVE-2019-16021` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2020 · Tags: CWE-399
- [Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2019-16023.md)
  `CVE-2019-16023` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2020 · Tags: CWE-399
- [Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3569.md)
  `CVE-2020-3569` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 23 Sept 2020 · Tags: Denial of service
- [Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-3473.md)
  `CVE-2020-3473` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-264
- [Cisco IOS XR Authenticated User Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-3530.md)
  `CVE-2020-3530` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.4 High · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-264
- [Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability](https://agentprime.io/advisories/CVE-2020-3566.md)
  `CVE-2020-3566` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 29 Aug 2020 · Tags: Denial of service
- [Cisco IOS XR Software Additional Paths Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3449.md)
  `CVE-2020-3449` · CVE record: Cisco Cisco IOS XR Software · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2020 · Tags: CWE-754
- [Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2020-3364.md)
  `CVE-2020-3364` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2020 · Tags: Broken access control
- [Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-3217.md)
  `CVE-2020-3217` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 3 Jun 2020 · Tags: CWE-20
- [Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3190.md)
  `CVE-2020-3190` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 4 Mar 2020 · Tags: Denial of service
- [Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3120.md)
  `CVE-2020-3120` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 5 Feb 2020 · Tags: Memory corruption
- [Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability](https://agentprime.io/advisories/CVE-2020-3118.md)
  `CVE-2020-3118` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.12 · Not analysed yet · Published 5 Feb 2020 · Tags: Memory corruption
- [Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-16027.md)
  `CVE-2019-16027` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.7 High · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-20
- [Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2019-16022.md)
  `CVE-2019-16022` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-399
- [Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2019-16020.md)
  `CVE-2019-16020` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-399
- [Cisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-16018.md)
  `CVE-2019-16018` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-399
- [Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-15989.md)
  `CVE-2019-15989` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-754
- [Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-15998.md)
  `CVE-2019-15998` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 26 Nov 2019 · Tags: Broken access control
- [Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-12709.md)
  `CVE-2019-12709` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 25 Sept 2019 · Tags: Command injection
- [Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1918.md)
  `CVE-2019-1918` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 7 Aug 2019 · Tags: CWE-20
- [Cisco IOS XR Software Intermediate System to Intermediate System Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1910.md)
  `CVE-2019-1910` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 7 Aug 2019 · Tags: CWE-20
- [Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1909.md)
  `CVE-2019-1909` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.8 Medium · Not analysed yet · Published 6 Jul 2019 · Tags: CWE-20
- [Cisco IOS XR Software Secure Shell Authentication Vulnerability](https://agentprime.io/advisories/CVE-2019-1842.md)
  `CVE-2019-1842` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.4 Medium · Not analysed yet · Published 5 Jun 2019 · Tags: Broken access control
- [Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1846.md)
  `CVE-2019-1846` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 16 May 2019 · Tags: CWE-20
- [Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1849.md)
  `CVE-2019-1849` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 16 May 2019 · Tags: CWE-754
- [Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1712.md)
  `CVE-2019-1712` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 17 Apr 2019 · Tags: CWE-20
- [Cisco IOS XR gRPC Software Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1711.md)
  `CVE-2019-1711` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2019 · Tags: CWE-20
- [Cisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1686.md)
  `CVE-2019-1686` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 17 Apr 2019 · Tags: Broken access control
- [Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability](https://agentprime.io/advisories/CVE-2019-1710.md)
  `CVE-2019-1710` · CVE record: Cisco Cisco IOS XR Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2019 · Tags: CWE-20
- [Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2018-15428.md)
  `CVE-2018-15428` · CVE record: Cisco Cisco IOS XR Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-20
- [Cisco IOS XR Software: A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR…](https://agentprime.io/advisories/CVE-2017-6599.md)
  `CVE-2017-6599` · CVE record: Cisco IOS XR Software · No CVSS score · Not analysed yet · Published 7 Apr 2017

Newest: <https://agentprime.io/advisories/technology/cisco-ios-xr-software.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-ios-xr-software&cursor=WyIyMDIyLTA0LTE1VDE0OjIwOjIwLjM3MTAwMFoiLCJDVkUtMjAyMi0yMDc1OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-ios-xr-software/?cursor=WyIyMDIyLTA0LTE1VDE0OjIwOjIwLjM3MTAwMFoiLCJDVkUtMjAyMi0yMDc1OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.