Known vulnerabilities in Cisco IOS XR - page 4

Vendor: Cisco Systems, Inc
Software: Cisco IOS XR
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 112
Public exploits: 1
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XR Cisco IOS XR is affected by 112 known vulnerabilities: 1 critical, 25 high, 44 medium, 41 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62348 - Out-of-bounds read
CVE-2022-20714		 CWE-125 High
No
No
 7.3.2 15.04.2022 SB2022041507
#VU59955 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20655		 CWE-78 Low
No
No
 7.0.2, 7.1.1 24.01.2022 SB2022012410
SB2022012512
#VU56433 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34728		 CWE-78 Low
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090915
#VU56432 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34719		 CWE-78 Low
No
No
 6.8.1, 7.3.2, 7.4.1 09.09.2021 SB2021090915
#VU56431 - NULL Pointer Dereference
CVE-2021-34737		 CWE-476 Medium
No
No
 6.8.1, 7.3.2, 7.4.1 09.09.2021 SB2021090914
#VU56430 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34771		 CWE-200 Low
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090913
#VU56429 - Argument Injection or Modification
CVE-2021-34718		 CWE-88 Medium
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090912
#VU56428 - Improper input validation
CVE-2021-34720		 CWE-20 Medium
No
No
 6.2.3, 6.3.2, 6.3.3, 6.7.4, 7.2.2 09.09.2021 SB2021090911
#VU56426 - Reachable Assertion
CVE-2021-1440		 CWE-617 Medium
No
No
 7.3.1, 7.3.15, 7.4.1 09.09.2021 SB2021090910
#VU56427 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34722		 CWE-78 Medium
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090909
#VU56423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34721		 CWE-78 Low
No
No
 6.8.1, 7.3.2, 7.4.1 09.09.2021 SB2021090909
#VU51981 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1485		 CWE-78 Low
No
No
 7.3.1 08.04.2021 SB2021040807
#VU50374 - Improper input validation
CVE-2021-1268		 CWE-20 Medium
No
No
 6.5.2 .SMU, 6.7.3, 7.1.3, 7.2.2 04.02.2021 SB2021020502
#VU50375 - Improper Access Control
CVE-2021-1243		 CWE-284 Medium
No
No
 6.4.2 .SMU, 6.6.3 .SMU, 6.6.4, 6.7.2, 6.7.3, 7.0.14, 7.1.2, 7.1.3, 7.1.25, 7.2.1, 7.2.2, 7.2.12 04.02.2021 SB2021020503
#VU50381 - Improper Access Control
CVE-2021-1389		 CWE-284 Medium
No
No
 7.2.0 04.02.2021 SB2021020507
#VU50304 - Missing release of memory after effective lifetime
CVE-2021-1313		 CWE-401 Medium
No
No
 6.0.2, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.12, 6.1.21, 6.1.22, 6.1.31, 6.1.32, 6.1.33, 6.1.42, 6.1.45, 6.2.1, 6.2.2, 6.2.3, 6.2.25, 6.3.1, 6.3.2, 6.3.3, 6.3.15, 6.4.0, 6.4.1, 6.4.2, 6.5.90, 6.5.92, 6.5.93, 6.7.2, 7.0.1, 7.0.2, 7.2.1 03.02.2021 SB2021020336
#VU50303 - Resource Management Errors
CVE-2021-1288		 CWE-399 Medium
No
No
 5.1.3 .SMU, 5.2.6, 5.2.47, 5.3.2 .SMU, 5.3.3 .SMU, 5.3.4, 6.0.1, 6.0.2, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.12, 6.1.21, 6.1.22, 6.1.31, 6.1.32, 6.1.33, 6.1.42, 6.1.45, 6.2.1, 6.2.2, 6.2.3, 6.2.25, 6.3.1, 6.3.2, 6.3.3, 6.3.15, 6.4.0, 6.4.1, 6.4.2, 6.5.1, 6.5.15, 6.5.90, 6.5.92, 6.5.93, 6.7.2, 7.0.1, 7.0.2, 7.2.1 03.02.2021 SB2021020336
#VU50302 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1128		 CWE-200 Low
No
No
 6.7.2, 6.7.3, 7.1.2, 7.1.3, 7.1.25, 7.2.1, 7.2.2, 7.2.12 03.02.2021 SB2021020335
#VU47109 - NULL Pointer Dereference
CVE-2020-3407		 CWE-476 High
No
No
 - 24.09.2020 SB2020092502
#VU49026 - Integer overflow
CVE-2020-3120		 CWE-190 Low
No
No
 asr9k x64 6.5.3.CSCvr78185, asr9k px 6.4.2.CSCvr78185, asr9k px 6.5.3.CSCvr78185, iosxrwbd 6.6.12.CSCvr78185, ncs5k 6.5.3.CSCvr78185, ncs6k 5.2.5.CSCvr78185, ncs540 6.5.3.CSCvr78185, ncs540l 7.0.1.CSCvr78185, ncs560 6.6.25.CSCvr78185, ncs5500 6.5.3.CSCvr78185, xrv9k 6.5.3.CSCvr78185, hfr px 6.4.2.CSCvr78185, 6.6.3, 7.0.2 05.02.2020 SB2020020539


Showing elements 61 - 80 out of 112