Known vulnerabilities in Cisco IOS XR - page 4

Vendor: Cisco Systems, Inc
Software: Cisco IOS XR
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 105
Public exploits: 1
Known exploited (KEV): 5
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XR Cisco IOS XR is affected by 105 known vulnerabilities: 1 critical, 18 high, 44 medium, 41 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56430 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34771		 CWE-200 Low
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090913
#VU56429 - Argument Injection or Modification
CVE-2021-34718		 CWE-88 Medium
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090912
#VU56428 - Improper input validation
CVE-2021-34720		 CWE-20 Medium
No
No
 6.2.3, 6.3.2, 6.3.3, 6.7.4, 7.2.2 09.09.2021 SB2021090911
#VU56426 - Reachable Assertion
CVE-2021-1440		 CWE-617 Medium
No
No
 7.3.1, 7.3.15, 7.4.1 09.09.2021 SB2021090910
#VU56427 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34722		 CWE-78 Medium
No
No
 7.3.2, 7.4.1 09.09.2021 SB2021090909
#VU56423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-34721		 CWE-78 Low
No
No
 6.8.1, 7.3.2, 7.4.1 09.09.2021 SB2021090909
#VU51981 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1485		 CWE-78 Low
No
No
 7.3.1 08.04.2021 SB2021040807
#VU50374 - Improper input validation
CVE-2021-1268		 CWE-20 Medium
No
No
 6.5.2 .SMU, 6.7.3, 7.1.3, 7.2.2 04.02.2021 SB2021020502
#VU50375 - Improper Access Control
CVE-2021-1243		 CWE-284 Medium
No
No
 6.4.2 .SMU, 6.6.3 .SMU, 6.6.4, 6.7.2, 6.7.3, 7.0.14, 7.1.2, 7.1.3, 7.1.25, 7.2.1, 7.2.2, 7.2.12 04.02.2021 SB2021020503
#VU50381 - Improper Access Control
CVE-2021-1389		 CWE-284 Medium
No
No
 7.2.0 04.02.2021 SB2021020507
#VU50304 - Missing release of memory after effective lifetime
CVE-2021-1313		 CWE-401 Medium
No
No
 6.0.2, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.12, 6.1.21, 6.1.22, 6.1.31, 6.1.32, 6.1.33, 6.1.42, 6.1.45, 6.2.1, 6.2.2, 6.2.3, 6.2.25, 6.3.1, 6.3.2, 6.3.3, 6.3.15, 6.4.0, 6.4.1, 6.4.2, 6.5.90, 6.5.92, 6.5.93, 6.7.2, 7.0.1, 7.0.2, 7.2.1 03.02.2021 SB2021020336
#VU50303 - Resource Management Errors
CVE-2021-1288		 CWE-399 Medium
No
No
 5.1.3 .SMU, 5.2.6, 5.2.47, 5.3.2 .SMU, 5.3.3 .SMU, 5.3.4, 6.0.1, 6.0.2, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.12, 6.1.21, 6.1.22, 6.1.31, 6.1.32, 6.1.33, 6.1.42, 6.1.45, 6.2.1, 6.2.2, 6.2.3, 6.2.25, 6.3.1, 6.3.2, 6.3.3, 6.3.15, 6.4.0, 6.4.1, 6.4.2, 6.5.1, 6.5.15, 6.5.90, 6.5.92, 6.5.93, 6.7.2, 7.0.1, 7.0.2, 7.2.1 03.02.2021 SB2021020336
#VU50302 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1128		 CWE-200 Low
No
No
 6.7.2, 6.7.3, 7.1.2, 7.1.3, 7.1.25, 7.2.1, 7.2.2, 7.2.12 03.02.2021 SB2021020335
#VU47109 - NULL Pointer Dereference
CVE-2020-3407		 CWE-476 High
No
No
 - 24.09.2020 SB2020092502
#VU46252 - Permissions, Privileges, and Access Controls
CVE-2020-3530		 CWE-264 Low
No
No
 7.1.2 03.09.2020 SB2020090311
#VU46251 - Permissions, Privileges, and Access Controls
CVE-2020-3473		 CWE-264 Low
No
No
 7.0.2, 7.1.1 03.09.2020 SB2020090310
#VU46200 - Resource exhaustion
CVE-2020-3569		 CWE-400 High
No
Exploited
 - 02.09.2020 SB2020082902
#VU46126 - Resource exhaustion
CVE-2020-3566		 CWE-400 High
No
Exploited
 - 29.08.2020 SB2020082902
#VU34091 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-3449		 CWE-835 Medium
No
No
 7.1.3, 7.2.1, 7.3.1 06.08.2020 SB2020080610
#VU25786 - Resource exhaustion
CVE-2020-3190		 CWE-400 Medium
No
No
 6.4.3, 6.6.3, 7.0.2, 7.1.1 05.03.2020 SB2020030513


Showing elements 61 - 80 out of 105