Known vulnerabilities in Cisco IOS XR - page 2

Software: Cisco IOS XR
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 1
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XR Cisco IOS XR is affected by 112 known vulnerabilities: 1 critical, 25 high, 44 medium, 41 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105697 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20138
CWE-78 Low
No
No
7.11.21, 24.2.2, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 13.03.2025 SB2025031333
#VU105696 - Permissions, Privileges, and Access Controls
CVE-2025-20145
CWE-264 Medium
No
No
7.11.21, 24.2.2, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 13.03.2025 SB2025031333
#VU105690 - Allocation of Resources Without Limits or Throttling
CVE-2025-20209
CWE-770 High
No
No
7.11.21, 24.2.2, 24.2.20, 24.3.1, 24.3.2, 24.3.20, 24.4.1, 24.4.10 13.03.2025 SB2025031333
#VU105678 - Improper Verification of Cryptographic Signature
CVE-2025-20143
CWE-347 Low
No
No
7.9.1 12.03.2025 SB2025031278
#VU105677 - Improper input validation
CVE-2025-20142
CWE-20 Medium
No
No
7.9.21, 7.10.2 12.03.2025 SB2025031277
#VU103680 - Error Handling
CVE-2025-20174
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103681 - Error Handling
CVE-2025-20175
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103682 - Error Handling
CVE-2025-20176
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103675 - Error Handling
CVE-2025-20169
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103676 - Error Handling
CVE-2025-20170
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103677 - Error Handling
CVE-2025-20171
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103678 - Error Handling
CVE-2025-20172
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU103679 - Error Handling
CVE-2025-20173
CWE-388 Medium
No
No
24.2.21, 24.4.2, 25.2.1 06.02.2025 SB2025020624
SB2025020625
#VU97204 - Improper Verification of Source of a Communication Channel
CVE-2024-20390
CWE-940 Medium
No
No
24.1.2 12.09.2024 SB2024091246
#VU97203 - Incorrect Provision of Specified Functionality
CVE-2024-20317
CWE-684 Medium
No
No
7.10.2, 7.11.1, 24.1.1 12.09.2024 SB2024091245
#VU97201 - Improper input validation
CVE-2024-20406
CWE-20 Medium
No
No
7.11.2 12.09.2024 SB2024091244
#VU97200 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20398
CWE-78 Low
No
No
7.11.21, 24.1.2 12.09.2024 SB2024091243
#VU97199 - Improper Access Control
CVE-2024-20343
CWE-284 Low
No
No
7.11.2, 24.1.2 12.09.2024 SB2024091241
#VU97198 - Missing release of memory after effective lifetime
CVE-2024-20304
CWE-401 Medium
No
No
7.11.21, 24.2.2, 24.3.1 12.09.2024 SB2024091239
#VU94090 - Incorrect Permission Assignment for Critical Resource
CVE-2024-20456
CWE-732 Low
No
No
- 10.07.2024 SB2024071078


Showing elements 21 - 40 out of 112