Known vulnerabilities in Cisco IOS XR - page 5

Software: Cisco IOS XR
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Total vulnerabilities: 105
Public exploits: 1
Known exploited (KEV): 5
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XR Cisco IOS XR is affected by 105 known vulnerabilities: 1 critical, 18 high, 44 medium, 41 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49026 - Integer overflow
CVE-2020-3120
CWE-190 Low
No
No
asr9k x64 6.5.3.CSCvr78185, asr9k px 6.4.2.CSCvr78185, asr9k px 6.5.3.CSCvr78185, iosxrwbd 6.6.12.CSCvr78185, ncs5k 6.5.3.CSCvr78185, ncs6k 5.2.5.CSCvr78185, ncs540 6.5.3.CSCvr78185, ncs540l 7.0.1.CSCvr78185, ncs560 6.6.25.CSCvr78185, ncs5500 6.5.3.CSCvr78185, xrv9k 6.5.3.CSCvr78185, hfr px 6.4.2.CSCvr78185, 6.6.3, 7.0.2 05.02.2020 SB2020020539
#VU24524 - Improper Check for Unusual or Exceptional Conditions
CVE-2019-15989
CWE-754 High
No
No
- 24.01.2020 SB2020012413
#VU24523 - Improper input validation
CVE-2019-16027
CWE-20 Medium
No
No
6.6.3 24.01.2020 SB2020012414
#VU24522 - Resource Management Errors
CVE-2019-16023
CWE-399 High
No
No
- 24.01.2020 SB2020012413
#VU24521 - Resource Management Errors
CVE-2019-16022
CWE-399 High
No
No
- 24.01.2020 SB2020012413
#VU24520 - Resource Management Errors
CVE-2019-16021
CWE-399 High
No
No
- 24.01.2020 SB2020012413
#VU24519 - Resource Management Errors
CVE-2019-16020
CWE-399 High
No
No
- 24.01.2020 SB2020012413
#VU24518 - Resource Management Errors
CVE-2019-16019
CWE-399 High
No
No
- 24.01.2020 SB2020012413
#VU24517 - Resource Management Errors
CVE-2019-16018
CWE-399 Medium
No
No
- 24.01.2020 SB2020012413
#VU10411 - Improper input validation
CVE-2018-0132
CWE-20 Low
No
No
- 08.02.2018 SB2018020810
#VU9512 - Improper input validation
CVE-2017-12355
CWE-20 Low
No
No
- 29.11.2017 SB2017120113
#VU8715 - Improper input validation
CVE-2017-12270
CWE-20 Low
No
No
- 05.10.2017 SB2017100515
#VU7366 - Permissions, Privileges, and Access Controls
CVE-2017-6728
CWE-264 Low
No
No
- 06.07.2017 SB2017070608
#VU7365 - Improper input validation
CVE-2017-6731
CWE-20 Low
No
No
- 06.07.2017 SB2017070608
#VU7178 - Command injection
CVE-2017-6718
CWE-77 Low
No
No
- 22.06.2017 SB2017062211
#VU7177 - Command injection
CVE-2017-6719
CWE-77 Low
No
No
- 22.06.2017 SB2017062211
#VU6400 - Resource Management Errors
CVE-2017-3876
CWE-399 Medium
No
No
- 03.05.2017 SB2017050304
#VU630 - Improper input validation
CVE-2016-6410
CWE-20 Low
No
No
- 22.09.2016 SB2016092103
#VU629 - Resource Management Errors
CVE-2016-6409
CWE-399 Low
No
No
- 22.09.2016 SB2016092103
#VU628 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2016-6414
CWE-78 Low
No
No
- 22.09.2016 SB2016092103


Showing elements 81 - 100 out of 105