Advisories · Technology

Cisco IOS XR Software.

Every CVE that names Cisco IOS XR Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-20714 CVE record

CVSS 8.6 High

Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-126
Not analysed yet 15 Apr 2022
CVE-2021-34771 CVE record

CVSS 5.5 Medium

Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability
- Cisco IOS XR Software
- Information disclosure
Not analysed yet 9 Sept 2021
CVE-2021-34737 CVE record

CVSS 5.8 Medium

Cisco IOS XR Software DHCP Version 4 Server Denial of Service Vulnerability
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 9 Sept 2021
CVE-2021-34728 CVE record

CVSS 7.8 High

Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities
- Cisco IOS XR Software
- Command injection
Not analysed yet 9 Sept 2021
CVE-2021-34722 CVE record

CVSS 6.7 Medium

Cisco IOS XR Software Command Injection Vulnerabilities
- Cisco IOS XR Software
- Command injection
Not analysed yet 9 Sept 2021
CVE-2021-34721 CVE record

CVSS 6.7 Medium

Cisco IOS XR Software Command Injection Vulnerabilities
- Cisco IOS XR Software
- Command injection
Not analysed yet 9 Sept 2021
CVE-2021-34720 CVE record

CVSS 8.6 High

Cisco IOS XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-771
Not analysed yet 9 Sept 2021
CVE-2021-34719 CVE record

CVSS 7.8 High

Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities
- Cisco IOS XR Software
- Command injection
Not analysed yet 9 Sept 2021
CVE-2021-34718 CVE record

CVSS 8.1 High

Cisco IOS XR Software Arbitrary File Read and Write Vulnerability
- Cisco IOS XR Software
- Command injection
Not analysed yet 9 Sept 2021
CVE-2021-34713 CVE record

CVSS 7.4 High

Cisco IOS XR Software for ASR 9000 Series Routers Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-399
Not analysed yet 9 Sept 2021
CVE-2021-34709 CVE record

CVSS 6.0 Medium

Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 9 Sept 2021
CVE-2021-34708 CVE record

CVSS 6.0 Medium

Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 9 Sept 2021
CVE-2021-1485 CVE record

CVSS 6.6 Medium

Cisco IOS XR Software Command Injection Vulnerability
- Cisco IOS XR Software
- Command injection
Not analysed yet 8 Apr 2021
CVE-2021-1313 CVE record

CVSS 8.6 High

Cisco IOS XR Software Enf Broker Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-399
Not analysed yet 4 Feb 2021
CVE-2021-1370 CVE record

CVSS 7.8 High

Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Privilege Escalation Vulnerability
- Cisco IOS XR Software
- Command injection
Not analysed yet 4 Feb 2021
CVE-2021-1389 CVE record

CVSS 5.8 Medium

Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 4 Feb 2021
CVE-2021-1128 CVE record

CVSS 5.5 Medium

Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability
- Cisco IOS XR Software
- Information disclosure
Not analysed yet 4 Feb 2021
CVE-2021-1136 CVE record

CVSS 6.7 Medium

Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 4 Feb 2021
CVE-2021-1243 CVE record

CVSS 5.3 Medium

Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 4 Feb 2021
CVE-2021-1244 CVE record

CVSS 6.7 Medium

Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 4 Feb 2021
CVE-2021-1268 CVE record

CVSS 7.4 High

Cisco IOS XR Software IPv6 Flood Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-1076
Not analysed yet 4 Feb 2021
CVE-2021-1288 CVE record

CVSS 8.6 High

Cisco IOS XR Software Enf Broker Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-399
Not analysed yet 4 Feb 2021
CVE-2020-26070 CVE record

CVSS 8.6 High

Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 12 Nov 2020
CVE-2020-3284 CVE record

CVSS 8.1 High

Cisco IOS XR Software Enhanced Preboot eXecution Environment Unsigned Code Execution Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 6 Nov 2020
CVE-2019-16019 CVE record

CVSS 8.6 High

Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities
- Cisco IOS XR Software
- CWE-399
Not analysed yet 23 Sept 2020
CVE-2019-16021 CVE record

CVSS 8.6 High

Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities
- Cisco IOS XR Software
- CWE-399
Not analysed yet 23 Sept 2020
CVE-2019-16023 CVE record

CVSS 8.6 High

Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities
- Cisco IOS XR Software
- CWE-399
Not analysed yet 23 Sept 2020
CVE-2020-3569 CVE record

CVSS 8.6 HighCritical · KEVKEV

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
- Cisco IOS XR Software
- Denial of service
Not analysed yet 23 Sept 2020
CVE-2020-3473 CVE record

CVSS 7.8 High

Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability
- Cisco IOS XR Software
- CWE-264
Not analysed yet 4 Sept 2020
CVE-2020-3530 CVE record

CVSS 8.4 High

Cisco IOS XR Authenticated User Privilege Escalation Vulnerability
- Cisco IOS XR Software
- CWE-264
Not analysed yet 4 Sept 2020
CVE-2020-3566 CVE record

CVSS 8.6 HighCritical · KEVKEV

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 29 Aug 2020
CVE-2020-3449 CVE record

CVSS 4.3 Medium

Cisco IOS XR Software Additional Paths Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-754
Not analysed yet 17 Aug 2020
CVE-2020-3364 CVE record

CVSS 5.3 Medium

Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 18 Jun 2020
CVE-2020-3217 CVE record

CVSS 8.8 High

Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 3 Jun 2020
CVE-2020-3190 CVE record

CVSS 5.8 Medium

Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 4 Mar 2020
CVE-2020-3120 CVE record

CVSS 7.4 High

Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 5 Feb 2020
CVE-2020-3118 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 5 Feb 2020
CVE-2019-16027 CVE record

CVSS 7.7 High

Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 26 Jan 2020
CVE-2019-16022 CVE record

CVSS 8.6 High

Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities
- Cisco IOS XR Software
- CWE-399
Not analysed yet 26 Jan 2020
CVE-2019-16020 CVE record

CVSS 8.6 High

Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities
- Cisco IOS XR Software
- CWE-399
Not analysed yet 26 Jan 2020
CVE-2019-16018 CVE record

CVSS 7.4 High

Cisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-399
Not analysed yet 26 Jan 2020
CVE-2019-15989 CVE record

CVSS 8.6 High

Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-754
Not analysed yet 26 Jan 2020
CVE-2019-15998 CVE record

CVSS 5.3 Medium

Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 26 Nov 2019
CVE-2019-12709 CVE record

CVSS 6.7 Medium

Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability
- Cisco IOS XR Software
- Command injection
Not analysed yet 25 Sept 2019
CVE-2019-1918 CVE record

CVSS 7.4 High

Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 7 Aug 2019
CVE-2019-1910 CVE record

CVSS 7.4 High

Cisco IOS XR Software Intermediate System to Intermediate System Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 7 Aug 2019
CVE-2019-1909 CVE record

CVSS 6.8 Medium

Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 6 Jul 2019
CVE-2019-1842 CVE record

CVSS 5.4 Medium

Cisco IOS XR Software Secure Shell Authentication Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 5 Jun 2019
CVE-2019-1846 CVE record

CVSS 7.4 High

Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 16 May 2019
CVE-2019-1849 CVE record

CVSS 7.4 High

Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-754
Not analysed yet 16 May 2019
CVE-2019-1712 CVE record

CVSS 5.8 Medium

Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 17 Apr 2019
CVE-2019-1711 CVE record

CVSS 5.3 Medium

Cisco IOS XR gRPC Software Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 17 Apr 2019
CVE-2019-1686 CVE record

CVSS 5.8 Medium

Cisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 17 Apr 2019
CVE-2019-1710 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 17 Apr 2019
CVE-2018-15428 CVE record

Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 5 Oct 2018
CVE-2017-6599 CVE record

Cisco IOS XR Software: A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR…
- Cisco IOS XR Software
Not analysed yet 7 Apr 2017