Known vulnerabilities in Cisco IOS XR - page 2

Software: Cisco IOS XR
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 1
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XR Cisco IOS XR is affected by 112 known vulnerabilities: 1 critical, 25 high, 44 medium, 41 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105697 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20138
CWE-78 Low
No
No
7.11.21, 24.2.2, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 13.03.2025 SB2025031333
#VU105696 - Permissions, Privileges, and Access Controls
CVE-2025-20145
CWE-264 Medium
No
No
7.11.21, 24.2.2, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 13.03.2025 SB2025031333
#VU105691 - Allocation of Resources Without Limits or Throttling
CVE-2025-20141
CWE-770 Medium
No
No
6.6.2, 6.6.3, 6.6.4, 6.6.25, 6.7.1, 6.7.2, 6.7.3, 6.7.4, 6.7.35, 6.8.1, 6.8.2, 6.9.1, 6.9.2, 7.0.1, 7.0.2, 7.0.90, 7.1.1, 7.1.2, 7.1.3, 7.1.15, 7.1.25, 7.2.0, 7.2.1, 7.2.2, 7.2.12, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.15, 7.3.16, 7.3.25, 7.3.26, 7.3.27, 7.4.1, 7.4.2, 7.4.15, 7.4.16, 7.5.1, 7.5.2, 7.5.3, 7.5.4, 7.5.5, 7.5.12, 7.6.1, 7.6.2, 7.6.3, 7.6.15, 7.7.1, 7.7.2, 7.7.21, 7.8.1, 7.8.2, 7.8.22, 7.8.23, 7.9.1, 7.9.2, 7.10.1, 7.10.2, 7.11.1, 7.11.2, 7.11.21, 24.1.1, 24.1.2, 24.2.1, 24.2.2, 24.2.11, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 13.03.2025 SB2025031334
#VU105690 - Allocation of Resources Without Limits or Throttling
CVE-2025-20209
CWE-770 High
No
No
7.11.21, 24.2.2, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 13.03.2025 SB2025031333
#VU105678 - Improper Verification of Cryptographic Signature
CVE-2025-20143
CWE-347 Low
No
No
7.9.1 12.03.2025 SB2025031278
#VU105677 - Improper input validation
CVE-2025-20142
CWE-20 Medium
No
No
7.9.21, 7.10.2 12.03.2025 SB2025031277
#VU103680 - Error Handling
CVE-2025-20174
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103681 - Error Handling
CVE-2025-20175
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103682 - Error Handling
CVE-2025-20176
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103675 - Error Handling
CVE-2025-20169
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103676 - Error Handling
CVE-2025-20170
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103677 - Error Handling
CVE-2025-20171
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103678 - Error Handling
CVE-2025-20172
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103679 - Error Handling
CVE-2025-20173
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU97204 - Improper Verification of Source of a Communication Channel
CVE-2024-20390
CWE-940 Medium
No
No
24.1.2 12.09.2024 SB2024091246
#VU97203 - Incorrect Provision of Specified Functionality
CVE-2024-20317
CWE-684 Medium
No
No
7.10.2, 7.11.1, 24.1.1 12.09.2024 SB2024091245
#VU97201 - Improper input validation
CVE-2024-20406
CWE-20 Medium
No
No
7.11.2 12.09.2024 SB2024091244
#VU97200 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20398
CWE-78 Low
No
No
7.11.21, 24.1.2 12.09.2024 SB2024091243
#VU97199 - Improper Access Control
CVE-2024-20343
CWE-284 Low
No
No
7.11.2, 24.1.2 12.09.2024 SB2024091241
#VU97198 - Missing release of memory after effective lifetime
CVE-2024-20304
CWE-401 Medium
No
No
7.11.21, 24.2.2, 24.3.1 12.09.2024 SB2024091239


Showing elements 21 - 40 out of 112