Known vulnerabilities in Cisco IOS XR 7.1.2

Software: Cisco IOS XR
Version: 7.1.2
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco IOS XR version 7.1.2 Cisco IOS XR 7.1.2 is affected by 16 vulnerabilities: 1 high, 9 medium, 6 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105678 - Improper Verification of Cryptographic Signature
CVE-2025-20143
CWE-347 Low
No
No
7.9.1 12.03.2025 SB2025031278
#VU105677 - Improper input validation
CVE-2025-20142
CWE-20 Medium
No
No
7.9.21, 7.10.2 12.03.2025 SB2025031277
#VU97204 - Improper Verification of Source of a Communication Channel
CVE-2024-20390
CWE-940 Medium
No
No
24.1.2 12.09.2024 SB2024091246
#VU97203 - Incorrect Provision of Specified Functionality
CVE-2024-20317
CWE-684 Medium
No
No
7.10.2, 7.11.1, 24.1.1 12.09.2024 SB2024091245
#VU97201 - Improper input validation
CVE-2024-20406
CWE-20 Medium
No
No
7.11.2 12.09.2024 SB2024091244
#VU97200 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20398
CWE-78 Low
No
No
7.11.21, 24.1.2 12.09.2024 SB2024091243
#VU97199 - Improper Access Control
CVE-2024-20343
CWE-284 Low
No
No
7.11.2, 24.1.2 12.09.2024 SB2024091241
#VU67372 - Buffer overflow
CVE-2022-20846
CWE-120 Medium
No
No
7.5.2, 7.6.2, 7.7.1 15.09.2022 SB2022091503
#VU56433 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34728
CWE-78 Low
No
No
7.3.2, 7.4.1 09.09.2021 SB2021090915
#VU56432 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34719
CWE-78 Low
No
No
6.8.1, 7.3.2, 7.4.1 09.09.2021 SB2021090915
#VU56431 - NULL Pointer Dereference
CVE-2021-34737
CWE-476 Medium
No
No
6.8.1, 7.3.2, 7.4.1 09.09.2021 SB2021090914
#VU56429 - Argument Injection or Modification
CVE-2021-34718
CWE-88 Medium
No
No
7.3.2, 7.4.1 09.09.2021 SB2021090912
#VU56427 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34722
CWE-78 Medium
No
No
7.3.2, 7.4.1 09.09.2021 SB2021090909
#VU56423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34721
CWE-78 Low
No
No
6.8.1, 7.3.2, 7.4.1 09.09.2021 SB2021090909
#VU46126 - Resource exhaustion
CVE-2020-3566
CWE-400 High
No
Exploited
- 29.08.2020 SB2020082902
#VU34091 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-3449
CWE-835 Medium
No
No
7.1.3, 7.2.1, 7.3.1 06.08.2020 SB2020080610