Known vulnerabilities in Cisco IOS XR - page 2
Vendor:
Cisco Systems, Inc
Software:
Cisco IOS XR
Software CPE:
cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
112
Public exploits:
1
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
26.3.1
26.2.2
26.2.1
26.1.2
25.4.2
25.2.21
24.4.15
25.2.15
25.2.30
25.1.30
7.10.2 CSCws66892
24.2.2 CSCws66892
24.1.2 CSCws66892
7.11.21 CSCws66900
24.3.2 CSCws66900
24.2.21 CSCws66900
24.2.21 CSCws36724
24.4.2 CSCws66900
7.9.2 CSCws66900
7.11.2 CSCws66900
26.1.1
25.4.1
25.2.2
25.3.1
25.2
25.1
24.3.30
24.4.30
25.1.2
25.1.1
24.4
24.3
6.7.35
7.3.6
7.3.16
7.3.25
7.3.26
7.3.27
7.4.15
7.4.16
7.5.5
7.5.12
7.6.15
7.8.22
24.2.20
24.3.20
24.4.10
24.2
24.2.21
25.2.1
24.4.2
24.4.1
24.3.2
7.8.23
24.2.11
24.1.2
7.8.1
7.7.2
6.9.2
6.9.1
6.8.2
7.11.21
24.2.2
24.3.1
24.2.1
7.11.2
7.10.2
24.1.1
24.1
7.11.1
7.9.21
7.11
7.6.3
7.8.2
7.5.4
7.3.5
7.10.1
7.9.2
7.7.21
7.10
7.9
7.8
6.5
7.5.3
7.9.1
6.5.32
7.7.1
7.7.0
7.6.2
7.6.1
7.6.0
7.5.2
7.5.1
7.5.0
7.3.4
7.3.3
7.4.2
7.1
6.7
6.1
6.0
6.7.4
7.3.15
7.3.0
4.3.0
6.8.1
6.8
7.4.1
7.4
7.3.2
7.3
6.6.4
7.0.14
6.4.2 (SMU)
6.6.3 (SMU)
6.5.2 (SMU)
5.2.6
5.2.47
5.3.4
6.1.12
6.1.21
6.1.22
6.1.31
6.1.32
6.1.33
6.1.42
6.1.45
6.2.2
6.3.1
6.4.0
6.5.1
6.5.15
6.5.90
6.5.92
6.5.93
5.1.3 (SMU)
5.3.2 (SMU)
5.3.3 (SMU)
6.7.2
6.7.3
7.1.25
7.2.2
7.2.12
6.6
7.0
6.6.12
ncs540l-7.0.1.CSCvr78185
iosxrwbd-6.6.12.CSCvr78185
xrv9k-6.5.3.CSCvr78185
ncs5500-6.5.3.CSCvr78185
ncs5k-6.5.3.CSCvr78185
ncs560-6.6.25.CSCvr78185
ncs540-6.5.3.CSCvr78185
asr9k-x64-6.5.3.CSCvr78185
asr9k-px-6.5.3.CSCvr78185
hfr-px-6.4.2.CSCvr78185
asr9k-px-6.4.2.CSCvr78185
ncs6k-5.2.5.CSCvr78185
5.0.0
6.7.1
7.0.90
7.1.15
7.2.0
7.1.2
7.3.1
7.2.1
7.1.3
7.1.1
7.0.2
6.4.3
6.5.3
6.5.2
6.4.2
6.3.3
6.3.2
6.3.15
6.2.3
6.2.25
6.1.4
6.1.3
5.2.5
4.3.2
6.6.3
7.0.1
6.6.25
6.6.2
6.6.1
6.4.1
6.0.2
4.3.2.MCAST
6.2.1
6.1.2
6.1.1
5.3.3
5.3.2
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.3
5.1.2
5.1.1
5.1.0
6.0.1
Vulnerabilities (112)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105697 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-20138 |
CWE-78 | Low | 7.11.21, 24.2.2, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 | 13.03.2025 |
SB2025031333 |
||
| #VU105696 - Permissions, Privileges, and Access Controls CVE-2025-20145 |
CWE-264 | Medium | 7.11.21, 24.2.2, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 | 13.03.2025 |
SB2025031333 |
||
| #VU105691 - Allocation of Resources Without Limits or Throttling CVE-2025-20141 |
CWE-770 | Medium | 6.6.2, 6.6.3, 6.6.4, 6.6.25, 6.7.1, 6.7.2, 6.7.3, 6.7.4, 6.7.35, 6.8.1, 6.8.2, 6.9.1, 6.9.2, 7.0.1, 7.0.2, 7.0.90, 7.1.1, 7.1.2, 7.1.3, 7.1.15, 7.1.25, 7.2.0, 7.2.1, 7.2.2, 7.2.12, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.15, 7.3.16, 7.3.25, 7.3.26, 7.3.27, 7.4.1, 7.4.2, 7.4.15, 7.4.16, 7.5.1, 7.5.2, 7.5.3, 7.5.4, 7.5.5, 7.5.12, 7.6.1, 7.6.2, 7.6.3, 7.6.15, 7.7.1, 7.7.2, 7.7.21, 7.8.1, 7.8.2, 7.8.22, 7.8.23, 7.9.1, 7.9.2, 7.10.1, 7.10.2, 7.11.1, 7.11.2, 7.11.21, 24.1.1, 24.1.2, 24.2.1, 24.2.2, 24.2.11, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 | 13.03.2025 |
SB2025031334 |
||
| #VU105690 - Allocation of Resources Without Limits or Throttling CVE-2025-20209 |
CWE-770 | High | 7.11.21, 24.2.2, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 | 13.03.2025 |
SB2025031333 |
||
| #VU105678 - Improper Verification of Cryptographic Signature CVE-2025-20143 |
CWE-347 | Low | 7.9.1 | 12.03.2025 |
SB2025031278 |
||
| #VU105677 - Improper input validation CVE-2025-20142 |
CWE-20 | Medium | 7.9.21, 7.10.2 | 12.03.2025 |
SB2025031277 |
||
| #VU103680 - Error Handling CVE-2025-20174 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103681 - Error Handling CVE-2025-20175 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103682 - Error Handling CVE-2025-20176 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103675 - Error Handling CVE-2025-20169 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103676 - Error Handling CVE-2025-20170 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103677 - Error Handling CVE-2025-20171 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103678 - Error Handling CVE-2025-20172 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU103679 - Error Handling CVE-2025-20173 |
CWE-388 | Medium | 24.2.21, 24.4.2, 25.2.1 | 06.02.2025 |
SB2025020624 SB2025020625 |
||
| #VU97204 - Improper Verification of Source of a Communication Channel CVE-2024-20390 |
CWE-940 | Medium | 24.1.2 | 12.09.2024 |
SB2024091246 |
||
| #VU97203 - Incorrect Provision of Specified Functionality CVE-2024-20317 |
CWE-684 | Medium | 7.10.2, 7.11.1, 24.1.1 | 12.09.2024 |
SB2024091245 |
||
| #VU97201 - Improper input validation CVE-2024-20406 |
CWE-20 | Medium | 7.11.2 | 12.09.2024 |
SB2024091244 |
||
| #VU97200 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-20398 |
CWE-78 | Low | 7.11.21, 24.1.2 | 12.09.2024 |
SB2024091243 |
||
| #VU97199 - Improper Access Control CVE-2024-20343 |
CWE-284 | Low | 7.11.2, 24.1.2 | 12.09.2024 |
SB2024091241 |
||
| #VU97198 - Missing release of memory after effective lifetime CVE-2024-20304 |
CWE-401 | Medium | 7.11.21, 24.2.2, 24.3.1 | 12.09.2024 |
SB2024091239 |
Showing elements 21 - 40 out of 112