Known vulnerabilities in ASR 1000 Series Aggregation Services Routers

Vendor: Cisco Systems, Inc
Software: ASR 1000 Series Aggregation Services Routers
Software CPE: cpe:2.3:h:cisco_systems:asr_1000_series_aggregation_services_routers:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ASR 1000 Series Aggregation Services Routers ASR 1000 Series Aggregation Services Routers is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116110 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-20314		 CWE-22 Low
No
No
 17.7.1 25.09.2025 SB2025092532
#VU116109 - Improper Handling of Undefined Values
CVE-2025-20313		 CWE-232 Low
No
No
 17.7.1 25.09.2025 SB2025092532
#VU116105 - Buffer Access with Incorrect Length Value
CVE-2025-20315		 CWE-805 Medium
No
No
 - 25.09.2025 SB2025092528