Known vulnerabilities in Cisco ASR 9000 Series Aggregation Services Routers

Vendor: Cisco Systems, Inc
Software: Cisco ASR 9000 Series Aggregation Services Routers
Software CPE: cpe:2.3:h:cisco_systems:cisco_asr_9000_series_aggregation_services_routers:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 26
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco ASR 9000 Series Aggregation Services Routers Cisco ASR 9000 Series Aggregation Services Routers is affected by 26 known vulnerabilities: 4 high, 7 medium, 14 low Critical High Medium Low

Vulnerabilities (26)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115158 - Improper Access Control
CVE-2025-20159		 CWE-284 Medium
No
No
 - 11.09.2025 SB2025091127
#VU115156 - Improper Verification of Cryptographic Signature
CVE-2025-20248		 CWE-347
No
No
 - 11.09.2025 SB2025091125
#VU105693 - Improper input validation
CVE-2025-20146		 CWE-20 High
No
No
 - 13.03.2025 SB2025031336
#VU87523 - NULL Pointer Dereference
CVE-2024-20266		 CWE-476 Medium
No
No
 - 14.03.2024 SB2024031422
#VU87522 - Improper input validation
CVE-2024-20318		 CWE-20 Low
No
No
 - 14.03.2024 SB2024031423
#VU87520 - Improper Access Control
CVE-2024-20315		 CWE-284 Medium
No
No
 - 14.03.2024 SB2024031418
#VU87514 - Improper Access Control
CVE-2024-20319		 CWE-284 Low
No
No
 - 14.03.2024 SB2024031425
#VU87513 - Improper Privilege Management
CVE-2024-20262		 CWE-269 Low
No
No
 - 14.03.2024 SB2024031426
#VU87511 - Improper input validation
CVE-2024-20327		 CWE-20 Low
No
No
 - 14.03.2024 SB2024031427
#VU80773 - Improper Verification of Cryptographic Signature
CVE-2023-20236		 CWE-347 Low
No
No
 - 14.09.2023 SB2023091420
#VU73203 - Improper input validation
CVE-2023-20049		 CWE-20 High
No
No
 - 09.03.2023 SB2023030930
#VU73202 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20064		 CWE-200 Low
No
No
 - 09.03.2023 SB2023030928
#VU67389 - Improper input validation
CVE-2022-20849		 CWE-20 Low
No
No
 - 15.09.2022 SB2022091508
#VU62348 - Out-of-bounds read
CVE-2022-20714		 CWE-125 High
No
No
 - 15.04.2022 SB2022041507
#VU56832 - Improper Access Control
CVE-2021-34696		 CWE-284 Medium
No
No
 - 23.09.2021 SB2021092303
#VU56431 - NULL Pointer Dereference
CVE-2021-34737		 CWE-476 Medium
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090914
#VU56423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34721		 CWE-78 Low
No
No
 6.8.1, 7.4.1 09.09.2021 SB2021090909
#VU56421 - Resource Management Errors
CVE-2021-34713		 CWE-399 Medium
No
No
 6.6.3, 6.7.1, 7.0.2, 7.1.1 09.09.2021 SB2021090906
#VU50373 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1370		 CWE-78 Low
No
No
 7.0.12.14i.BASE, 7.0.12.242i.BASE, 7.2.1.14s.BASE, 7.2.1.15i.BASE 04.02.2021 SB2021020501
#VU50380 - Improper Verification of Cryptographic Signature
CVE-2021-1244		 CWE-347 Low
No
No
 3, 6.7.2, 6.7.3, 7.0.14, 7.1.2, 7.1.25, 7.2.1, 7.2.2, 7.2.12 04.02.2021 SB2021020506


Showing elements 1 - 20 out of 26