Known vulnerabilities in Cisco IOS XR - page 6

Software: Cisco IOS XR
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xr:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 1
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XR Cisco IOS XR is affected by 112 known vulnerabilities: 1 critical, 25 high, 44 medium, 41 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU7366 - Permissions, Privileges, and Access Controls
CVE-2017-6728
CWE-264 Low
No
No
- 06.07.2017 SB2017070608
#VU7178 - Command injection
CVE-2017-6718
CWE-77 Low
No
No
- 22.06.2017 SB2017062211
#VU7177 - Command injection
CVE-2017-6719
CWE-77 Low
No
No
- 22.06.2017 SB2017062211
#VU6400 - Resource Management Errors
CVE-2017-3876
CWE-399 Medium
No
No
- 03.05.2017 SB2017050304
#VU6181 - Improper input validation
CVE-2016-1409
CWE-20 High
No
Exploited
- 24.03.2017 SB20016052601
#VU647 - Improper input validation
CVE-2016-6412
CWE-20 Low
No
No
- 23.09.2016 SB2016092103
#VU630 - Improper input validation
CVE-2016-6410
CWE-20 Low
No
No
- 22.09.2016 SB2016092103
#VU629 - Resource Management Errors
CVE-2016-6409
CWE-399 Low
No
No
- 22.09.2016 SB2016092103
#VU628 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2016-6414
CWE-78 Low
No
No
- 22.09.2016 SB2016092103
#VU532 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6415
CWE-200 High
Available
Exploited
- 19.09.2016 SB2016091601
#VU301 - Missing release of memory after effective lifetime
CVE-2016-6355
CWE-401 Medium
No
No
- 11.08.2016 SB2016081101
#VU153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2016-1456
CWE-78 Low
No
No
- 15.07.2016 SB2016071502


Showing elements 101 - 120 out of 112