Known vulnerabilities in Cisco IOS XR - page 3
Vendor:
Cisco Systems, Inc
Software:
Cisco IOS XR
Software CPE:
cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
112
Public exploits:
1
Known exploited (KEV):
5
Breakdown by Severity Chart
26.3.1
26.2.2
26.2.1
26.1.2
25.4.2
25.2.21
24.4.15
25.2.15
25.2.30
25.1.30
7.10.2 CSCws66892
24.2.2 CSCws66892
24.1.2 CSCws66892
7.11.21 CSCws66900
24.3.2 CSCws66900
24.2.21 CSCws66900
24.2.21 CSCws36724
24.4.2 CSCws66900
7.9.2 CSCws66900
7.11.2 CSCws66900
26.1.1
25.4.1
25.2.2
25.3.1
25.2
25.1
24.3.30
24.4.30
25.1.2
25.1.1
24.4
24.3
6.7.35
7.3.6
7.3.16
7.3.25
7.3.26
7.3.27
7.4.15
7.4.16
7.5.5
7.5.12
7.6.15
7.8.22
24.2.20
24.3.20
24.4.10
24.2
24.2.21
25.2.1
24.4.2
24.4.1
24.3.2
7.8.23
24.2.11
24.1.2
7.8.1
7.7.2
6.9.2
6.9.1
6.8.2
7.11.21
24.2.2
24.3.1
24.2.1
7.11.2
7.10.2
24.1.1
24.1
7.11.1
7.9.21
7.11
7.6.3
7.8.2
7.5.4
7.3.5
7.10.1
7.9.2
7.7.21
7.10
7.9
7.8
6.5
7.5.3
7.9.1
6.5.32
7.7.1
7.7.0
7.6.2
7.6.1
7.6.0
7.5.2
7.5.1
7.5.0
7.3.4
7.3.3
7.4.2
7.1
6.7
6.1
6.0
6.7.4
7.3.15
7.3.0
4.3.0
6.8.1
6.8
7.4.1
7.4
7.3.2
7.3
6.6.4
7.0.14
6.4.2 (SMU)
6.6.3 (SMU)
6.5.2 (SMU)
5.2.6
5.2.47
5.3.4
6.1.12
6.1.21
6.1.22
6.1.31
6.1.32
6.1.33
6.1.42
6.1.45
6.2.2
6.3.1
6.4.0
6.5.1
6.5.15
6.5.90
6.5.92
6.5.93
5.1.3 (SMU)
5.3.2 (SMU)
5.3.3 (SMU)
6.7.2
6.7.3
7.1.25
7.2.2
7.2.12
6.6
7.0
6.6.12
ncs540l-7.0.1.CSCvr78185
iosxrwbd-6.6.12.CSCvr78185
xrv9k-6.5.3.CSCvr78185
ncs5500-6.5.3.CSCvr78185
ncs5k-6.5.3.CSCvr78185
ncs560-6.6.25.CSCvr78185
ncs540-6.5.3.CSCvr78185
asr9k-x64-6.5.3.CSCvr78185
asr9k-px-6.5.3.CSCvr78185
hfr-px-6.4.2.CSCvr78185
asr9k-px-6.4.2.CSCvr78185
ncs6k-5.2.5.CSCvr78185
5.0.0
6.7.1
7.0.90
7.1.15
7.2.0
7.1.2
7.3.1
7.2.1
7.1.3
7.1.1
7.0.2
6.4.3
6.5.3
6.5.2
6.4.2
6.3.3
6.3.2
6.3.15
6.2.3
6.2.25
6.1.4
6.1.3
5.2.5
4.3.2
6.6.3
7.0.1
6.6.25
6.6.2
6.6.1
6.4.1
6.0.2
4.3.2.MCAST
6.2.1
6.1.2
6.1.1
5.3.3
5.3.2
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.3
5.1.2
5.1.1
5.1.0
6.0.1
Vulnerabilities (112)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU87523 - NULL Pointer Dereference CVE-2024-20266 |
CWE-476 | Medium | 7.11.1, 24.1.1 | 14.03.2024 |
SB2024031422 |
||
| #VU87522 - Improper input validation CVE-2024-20318 |
CWE-20 | Low | 7.9.2, 7.10.1 | 14.03.2024 |
SB2024031423 |
||
| #VU87521 - Improper Access Control CVE-2024-20322 |
CWE-284 | Medium | 7.11.2 | 14.03.2024 |
SB2024031419 |
||
| #VU87520 - Improper Access Control CVE-2024-20315 |
CWE-284 | Medium | 7.10.2 | 14.03.2024 |
SB2024031418 |
||
| #VU87518 - Incorrect Privilege Assignment CVE-2024-20320 |
CWE-266 | Low | 7.10.2 | 14.03.2024 |
SB2024031424 |
||
| #VU87514 - Improper Access Control CVE-2024-20319 |
CWE-284 | Low | 24.1.1 | 14.03.2024 |
SB2024031425 |
||
| #VU87513 - Improper Privilege Management CVE-2024-20262 |
CWE-269 | Low | 7.11.1, 24.1.1 | 14.03.2024 |
SB2024031426 |
||
| #VU87511 - Improper input validation CVE-2024-20327 |
CWE-20 | Low | 7.9.21, 7.10.1, 7.11.1 | 14.03.2024 |
SB2024031427 |
||
| #VU80775 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2023-20135 |
CWE-367 | Low | 7.10.1 | 14.09.2023 |
SB2023091421 |
||
| #VU80773 - Improper Verification of Cryptographic Signature CVE-2023-20236 |
CWE-347 | Low | 7.10.1 | 14.09.2023 |
SB2023091420 |
||
| #VU80771 - NULL Pointer Dereference CVE-2023-20233 |
CWE-476 | Low | 7.5.4, 7.6.3, 7.7.21, 7.8.2, 7.9.1 | 14.09.2023 |
SB2023091419 |
||
| #VU80769 - Permissions, Privileges, and Access Controls CVE-2023-20190 |
CWE-264 | Medium | 7.3.5, 7.5.4, 7.8.2, 7.9.1 | 14.09.2023 |
SB2023091418 |
||
| #VU80767 - Improper Access Control CVE-2023-20191 |
CWE-284 | High | 7.7.21, 7.9.2, 7.10.1 | 14.09.2023 |
SB2023091417 |
||
| #VU73203 - Improper input validation CVE-2023-20049 |
CWE-20 | High | 7.5.3, 7.6.2, 7.7.1 | 09.03.2023 |
SB2023030930 |
||
| #VU73202 - Exposure of sensitive information to an unauthorized actor CVE-2023-20064 |
CWE-200 | Low | 7.6.1, 7.7.1, 7.9.1 | 09.03.2023 |
SB2023030928 |
||
| #VU67389 - Improper input validation CVE-2022-20849 |
CWE-20 | Low | 7.5.2 | 15.09.2022 |
SB2022091508 |
||
| #VU67388 - Uncontrolled Memory Allocation CVE-2022-20845 |
CWE-789 | Low | 6.5.32 | 15.09.2022 |
SB2022091507 |
||
| #VU67372 - Buffer overflow CVE-2022-20846 |
CWE-120 | Medium | 7.5.2, 7.6.2, 7.7.1 | 15.09.2022 |
SB2022091503 |
||
| #VU63500 - Improper Access Control CVE-2022-20821 |
CWE-284 | Medium | 7.3.4 | 21.05.2022 |
SB2022052101 |
||
| #VU62350 - Resource Management Errors CVE-2022-20758 |
CWE-399 | Medium | 7.3.2, 7.4.2 | 15.04.2022 |
SB2022041509 |
Showing elements 41 - 60 out of 112