Known vulnerabilities in Cisco IOS XRv 9000 Router

Vendor: Cisco Systems, Inc
Software: Cisco IOS XRv 9000 Router
Software CPE: cpe:2.3:h:cisco_systems:cisco_ios_xrv_9000_router:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XRv 9000 Router Cisco IOS XRv 9000 Router is affected by 13 known vulnerabilities: 4 medium, 8 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115158 - Improper Access Control
CVE-2025-20159		 CWE-284 Medium
No
No
 - 11.09.2025 SB2025091127
#VU115156 - Improper Verification of Cryptographic Signature
CVE-2025-20248		 CWE-347
No
No
 - 11.09.2025 SB2025091125
#VU87523 - NULL Pointer Dereference
CVE-2024-20266		 CWE-476 Medium
No
No
 - 14.03.2024 SB2024031422
#VU87522 - Improper input validation
CVE-2024-20318		 CWE-20 Low
No
No
 - 14.03.2024 SB2024031423
#VU87520 - Improper Access Control
CVE-2024-20315		 CWE-284 Medium
No
No
 - 14.03.2024 SB2024031418
#VU87514 - Improper Access Control
CVE-2024-20319		 CWE-284 Low
No
No
 - 14.03.2024 SB2024031425
#VU87513 - Improper Privilege Management
CVE-2024-20262		 CWE-269 Low
No
No
 - 14.03.2024 SB2024031426
#VU73202 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20064		 CWE-200 Low
No
No
 - 09.03.2023 SB2023030928
#VU67389 - Improper input validation
CVE-2022-20849		 CWE-20 Low
No
No
 - 15.09.2022 SB2022091508
#VU56431 - NULL Pointer Dereference
CVE-2021-34737		 CWE-476 Medium
No
No
 - 09.09.2021 SB2021090914
#VU46251 - Permissions, Privileges, and Access Controls
CVE-2020-3473		 CWE-264 Low
No
No
 6.6.3, 7.0.2, 7.1.1 03.09.2020 SB2020090310
#VU25028 - Use of Externally-Controlled Format String
CVE-2020-3118		 CWE-134 Low
No
Exploited
 6.6.3 07.02.2020 SB2020020712
#VU49026 - Integer overflow
CVE-2020-3120		 CWE-190 Low
No
No
 - 05.02.2020 SB2020020539