Known vulnerabilities in Cisco IOS XR 6.0.1

Software: Cisco IOS XR
Version: 6.0.1
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco IOS XR version 6.0.1 Cisco IOS XR 6.0.1 is affected by 10 vulnerabilities: 2 high, 2 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67372 - Buffer overflow
CVE-2022-20846
CWE-120 Medium
No
No
7.5.2, 7.6.2, 7.7.1 15.09.2022 SB2022091503
#VU46251 - Permissions, Privileges, and Access Controls
CVE-2020-3473
CWE-264 Low
No
No
7.0.2, 7.1.1 03.09.2020 SB2020090310
#VU46126 - Resource exhaustion
CVE-2020-3566
CWE-400 High
No
Exploited
- 29.08.2020 SB2020082902
#VU6400 - Resource Management Errors
CVE-2017-3876
CWE-399 Medium
No
No
- 03.05.2017 SB2017050304
#VU647 - Improper input validation
CVE-2016-6412
CWE-20 Low
No
No
- 23.09.2016 SB2016092103
#VU630 - Improper input validation
CVE-2016-6410
CWE-20 Low
No
No
- 22.09.2016 SB2016092103
#VU629 - Resource Management Errors
CVE-2016-6409
CWE-399 Low
No
No
- 22.09.2016 SB2016092103
#VU628 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2016-6414
CWE-78 Low
No
No
- 22.09.2016 SB2016092103
#VU532 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6415
CWE-200 High
Public exploit available
Exploited
- 19.09.2016 SB2016091601
#VU153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2016-1456
CWE-78 Low
No
No
- 15.07.2016 SB2016071502