Known vulnerabilities in Cisco IOS XR - page 5
Vendor:
Cisco Systems, Inc
Software:
Cisco IOS XR
Software CPE:
cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
105
Public exploits:
1
Known exploited (KEV):
5
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
26.2.1
26.1.2
25.4.2
25.2.21
24.4.15
25.2.15
25.2.30
25.1.30
7.10.2 CSCws66892
24.2.2 CSCws66892
24.1.2 CSCws66892
7.11.21 CSCws66900
24.3.2 CSCws66900
24.2.21 CSCws66900
24.2.21 CSCws36724
24.4.2 CSCws66900
7.9.2 CSCws66900
7.11.2 CSCws66900
26.1.1
25.4.1
25.2.2
25.3.1
25.2
25.1
24.3.30
24.4.30
25.1.2
25.1.1
24.4
24.3
6.7.35
7.3.6
7.3.16
7.3.25
7.3.26
7.3.27
7.4.15
7.4.16
7.5.5
7.5.12
7.6.15
7.8.22
24.2.20
24.3.20
24.4.10
24.2
24.2.21
25.2.1
24.4.2
24.4.1
24.3.2
7.8.23
24.2.11
24.1.2
7.8.1
7.7.2
6.9.2
6.9.1
6.8.2
7.11.21
24.2.2
24.3.1
24.2.1
7.11.2
7.10.2
24.1.1
24.1
7.11.1
7.9.21
7.11
7.6.3
7.8.2
7.5.4
7.3.5
7.10.1
7.9.2
7.7.21
7.10
7.9
7.8
6.5
7.5.3
7.9.1
6.5.32
7.7.1
7.7.0
7.6.2
7.6.1
7.6.0
7.5.2
7.5.1
7.5.0
7.3.4
7.3.3
7.4.2
7.1
6.7
6.1
6.0
6.7.4
7.3.15
7.3.0
4.3.0
6.8.1
6.8
7.4.1
7.4
7.3.2
7.3
6.6.4
7.0.14
6.4.2 (SMU)
6.6.3 (SMU)
6.5.2 (SMU)
5.2.6
5.2.47
5.3.4
6.1.12
6.1.21
6.1.22
6.1.31
6.1.32
6.1.33
6.1.42
6.1.45
6.2.2
6.3.1
6.4.0
6.5.1
6.5.15
6.5.90
6.5.92
6.5.93
5.1.3 (SMU)
5.3.2 (SMU)
5.3.3 (SMU)
6.7.2
6.7.3
7.1.25
7.2.2
7.2.12
6.6
7.0
6.6.12
ncs540l-7.0.1.CSCvr78185
iosxrwbd-6.6.12.CSCvr78185
xrv9k-6.5.3.CSCvr78185
ncs5500-6.5.3.CSCvr78185
ncs5k-6.5.3.CSCvr78185
ncs560-6.6.25.CSCvr78185
ncs540-6.5.3.CSCvr78185
asr9k-x64-6.5.3.CSCvr78185
asr9k-px-6.5.3.CSCvr78185
hfr-px-6.4.2.CSCvr78185
asr9k-px-6.4.2.CSCvr78185
ncs6k-5.2.5.CSCvr78185
5.0.0
6.7.1
7.0.90
7.1.15
7.2.0
7.1.2
7.3.1
7.2.1
7.1.3
7.1.1
7.0.2
6.4.3
6.5.3
6.5.2
6.4.2
6.3.3
6.3.2
6.3.15
6.2.3
6.2.25
6.1.4
6.1.3
5.2.5
4.3.2
6.6.3
7.0.1
6.6.25
6.6.2
6.6.1
6.4.1
6.0.2
4.3.2.MCAST
6.2.1
6.1.2
6.1.1
5.3.3
5.3.2
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.3
5.1.2
5.1.1
5.1.0
6.0.1
Vulnerabilities (105)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU49026 - Integer overflow CVE-2020-3120 |
CWE-190 | Low | asr9k x64 6.5.3.CSCvr78185, asr9k px 6.4.2.CSCvr78185, asr9k px 6.5.3.CSCvr78185, iosxrwbd 6.6.12.CSCvr78185, ncs5k 6.5.3.CSCvr78185, ncs6k 5.2.5.CSCvr78185, ncs540 6.5.3.CSCvr78185, ncs540l 7.0.1.CSCvr78185, ncs560 6.6.25.CSCvr78185, ncs5500 6.5.3.CSCvr78185, xrv9k 6.5.3.CSCvr78185, hfr px 6.4.2.CSCvr78185, 6.6.3, 7.0.2 | 05.02.2020 |
SB2020020539 |
||
| #VU24524 - Improper Check for Unusual or Exceptional Conditions CVE-2019-15989 |
CWE-754 | High | - | 24.01.2020 |
SB2020012413 |
||
| #VU24523 - Improper input validation CVE-2019-16027 |
CWE-20 | Medium | 6.6.3 | 24.01.2020 |
SB2020012414 |
||
| #VU24522 - Resource Management Errors CVE-2019-16023 |
CWE-399 | High | - | 24.01.2020 |
SB2020012413 |
||
| #VU24521 - Resource Management Errors CVE-2019-16022 |
CWE-399 | High | - | 24.01.2020 |
SB2020012413 |
||
| #VU24520 - Resource Management Errors CVE-2019-16021 |
CWE-399 | High | - | 24.01.2020 |
SB2020012413 |
||
| #VU24519 - Resource Management Errors CVE-2019-16020 |
CWE-399 | High | - | 24.01.2020 |
SB2020012413 |
||
| #VU24518 - Resource Management Errors CVE-2019-16019 |
CWE-399 | High | - | 24.01.2020 |
SB2020012413 |
||
| #VU24517 - Resource Management Errors CVE-2019-16018 |
CWE-399 | Medium | - | 24.01.2020 |
SB2020012413 |
||
| #VU10411 - Improper input validation CVE-2018-0132 |
CWE-20 | Low | - | 08.02.2018 |
SB2018020810 |
||
| #VU9512 - Improper input validation CVE-2017-12355 |
CWE-20 | Low | - | 29.11.2017 |
SB2017120113 |
||
| #VU8715 - Improper input validation CVE-2017-12270 |
CWE-20 | Low | - | 05.10.2017 |
SB2017100515 |
||
| #VU7366 - Permissions, Privileges, and Access Controls CVE-2017-6728 |
CWE-264 | Low | - | 06.07.2017 |
SB2017070608 |
||
| #VU7365 - Improper input validation CVE-2017-6731 |
CWE-20 | Low | - | 06.07.2017 |
SB2017070608 |
||
| #VU7178 - Command injection CVE-2017-6718 |
CWE-77 | Low | - | 22.06.2017 |
SB2017062211 |
||
| #VU7177 - Command injection CVE-2017-6719 |
CWE-77 | Low | - | 22.06.2017 |
SB2017062211 |
||
| #VU6400 - Resource Management Errors CVE-2017-3876 |
CWE-399 | Medium | - | 03.05.2017 |
SB2017050304 |
||
| #VU630 - Improper input validation CVE-2016-6410 |
CWE-20 | Low | - | 22.09.2016 |
SB2016092103 |
||
| #VU629 - Resource Management Errors CVE-2016-6409 |
CWE-399 | Low | - | 22.09.2016 |
SB2016092103 |
||
| #VU628 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2016-6414 |
CWE-78 | Low | - | 22.09.2016 |
SB2016092103 |
Showing elements 81 - 100 out of 105