IX
Product
IOS XR
On CISA KEVExploited in the wild
199
CVEs
9
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 79Medium 53Low 0
Watch
Add IOS XR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20821 In wildKEV | 6.5 | May 26 | Cisco IOS XR Software Health Check Open Port Vulnerability Affected: All versions, or not specified |
| CVE-2009-2055 In wildKEV | 5.9 | Aug 19 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Affected: 3.4; 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.5; +13 more |
| CVE-2021-1440 | 6.8 | Nov 18 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to… Affected: 4.3.0 before 7.3.1 |
| CVE-2022-20758 | 6.8 | Apr 15 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote… Affected: before 6.8.2; 7.0 before 7.3.2; 7.4 before 7.4.2 |
| CVE-2018-15428 | 6.8 | Oct 5 | A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 6.0.1; 6.0.2; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +4 more |
| CVE-2025-20177 | 6.7 | Mar 12 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified… Affected: before 7.11.21; 24.2 before 24.2.2; 24.3 before 24.3.2; 24.4 |
| CVE-2025-20143 | 6.7 | Mar 12 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load… Affected: before 7.9.1 |
| CVE-2024-20456 | 6.7 | Jul 10 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and… Affected: 24.2.1 |
| CVE-2021-34722 | 6.7 | Sep 9 | Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and… Affected: 7.1.1 before 7.3.2; 7.4.0 before 7.4.1; 7.1.1 before 7.3.2; 7.4.0 before 7.4.1; 7.1.1 before 7.3.2; 7.4.0 before 7.4.1; +10 more |
| CVE-2021-34721 | 6.7 | Sep 9 | Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and… Affected: before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; +10 more |
| CVE-2021-34708 | 6.7 | Sep 9 | Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and… Affected: before 7.3.2; before 7.3.2; 7.4.0 before 7.4.1 |
| CVE-2021-1244 | 6.7 | Feb 4 | Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the… Affected: before 7.0.12; 7.1.0 before 7.2.1; before 7.2.1 |
| CVE-2021-1136 | 6.7 | Feb 4 | Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the… Affected: before 7.0.12; 7.1.0 before 7.2.1; before 7.2.1 |
| CVE-2019-12709 | 6.7 | Sep 25 | A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an… Affected: 5.1.0 before 6.5.3; 6.6.0 before 6.6.2 |
| CVE-2019-1649 | 6.7 | May 13 | A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local… Affected: 7.0.1; 7.1.1 |
| CVE-2017-6719 | 6.7 | Jul 4 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges,… Affected: 6.0.2; 6.0.2.01 |
| CVE-2017-6718 | 6.7 | Jul 4 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level Affected: 6.0.2; 6.0.2.01 |
| CVE-2023-20233 | 6.5 | Sep 13 | A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: before 7.5.4; 7.6 before 7.6.3; 7.7 before 7.7.21; 7.8 before 7.8.2; 7.9.0 |
| CVE-2021-1389 | 6.5 | Feb 4 | A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices could allow an unauthenticated, remote attacker to… Affected: before 6.6.3; 7.1.0; 7.2.0 |
| CVE-2021-1268 | 6.5 | Feb 4 | A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause an IPv6 flood on the… Affected: before 6.7.3; 7.1.0 before 7.1.3; 7.2.0 before 7.2.2; 7.3.0 |
| CVE-2020-3120 | 6.5 | Feb 5 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent… Affected: 5.2.5; 6.4.2; 6.5.3; 6.6.25; 7.0.1 |
| CVE-2019-16027 | 6.5 | Jan 26 | A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could… Affected: 4.3.2; 5.2.5; 6.2.2; 6.2.3; 6.2.25; 6.3.3; +34 more |
| CVE-2019-16018 | 6.5 | Jan 26 | A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker… Affected: 6.6.1; 6.6.2; 6.6.25; 7.0.1 |
| CVE-2019-1849 | 6.5 | May 16 | A vulnerability in the Border Gateway Patrol (BGP) Multiprotocol Label Switching (MPLS)-based Ethernet VPN (EVPN) implementation of Cisco IOS XR Software could allow an… Affected: 6.1.0 before 6.3.3; 6.4.0 before 6.4.2; 6.5.0 before 6.5.2; 6.6.0 before 6.6.1 |
| CVE-2016-1366 | 6.5 | Mar 24 | The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated… Affected: 5.0.0; 5.0.1; 5.2.1; 5.2.3; 5.2.4; 5.2.5 |
| CVE-2021-34709 | 6.4 | Sep 9 | Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and… Affected: before 7.3.2; before 7.3.2; 7.4.0 before 7.4.1 |
| CVE-2022-20849 | 6.1 | Nov 15 | A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.15; 6.6.1; 6.6.2; +27 more |
| CVE-2025-20248 | 6.0 | Sep 10 | A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR Software image signature verification and… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.15; 6.5.25; 6.5.26; +34 more |
| CVE-2017-6666 | 6.0 | Jun 13 | A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to… Affected: 6.0.0; 6.0.1; 6.0_base; 6.1.0; 6.1.1; 6.1.2; +3 more |
| CVE-2019-1909 | 5.9 | Jul 6 | A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 4.3.1 before 6.6.2 |
| CVE-2025-20145 | 5.8 | Mar 12 | A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.92; 6.5.93; 6.6.1; +34 more |
| CVE-2025-20144 | 5.8 | Mar 12 | A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.92; 6.5.93; 6.6.1; +34 more |
| CVE-2024-20322 | 5.8 | Mar 13 | A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 7.10.2; 7.11 |
| CVE-2020-3190 | 5.8 | Mar 4 | A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition for IPsec… Affected: before 6.4.3; 6.6.0 before 6.6.3; 7.0.0 before 7.0.2; 7.1.0 before 7.1.1 |
| CVE-2024-20489 | 5.5 | Sep 11 | A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB credentials Affected: 24.1.1; 24.1.2; 24.2.1; 24.2.11; 24.3.1 |
| CVE-2024-20343 | 5.5 | Sep 11 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlying Linux operating system Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.15; 6.5.92; 6.5.93; +34 more |
| CVE-2021-34771 | 5.5 | Sep 9 | A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information than their privileges allow Affected: before 7.3.2 |
| CVE-2021-1128 | 5.5 | Feb 4 | A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow Affected: before 7.1.2; 7.2.0; 7.3.0 |
| CVE-2024-20390 | 5.3 | Sep 11 | A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on XML TCP listen… Affected: before 24.1.2 |
| CVE-2023-20190 | 5.3 | Sep 13 | A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass the protection that… Affected: before 7.3.5; 7.5 before 7.5.4; 7.6 before 7.8.2; 7.9 |
| CVE-2020-3364 | 5.3 | Jun 18 | A vulnerability in the access control list (ACL) functionality of the standby route processor management interface of Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 6.7.1; 7.0.2; 7.0.11; 7.0.12; 7.1.1; 7.1.15 |
| CVE-2019-15998 | 5.3 | Nov 26 | A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is… Affected: 6.5.1; 6.5.2; 6.5.3 |
| CVE-2018-0286 | 5.3 | May 2 | A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on affected system Affected: 6.3.1; 6.3.2; 6.5.1 |
| CVE-2017-12355 | 5.3 | Nov 30 | A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to… Affected: 6.4.1_base |
| CVE-2017-6599 | 5.3 | Apr 7 | A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management… Affected: 6.1.1; 6.2.1 |
| CVE-2016-6421 | 5.3 | Oct 5 | Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, aka Bug ID CSCvb05643 Affected: 5.2.2 |
| CVE-2016-1433 | 5.3 | Sep 18 | Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service (OSPFv3 process reload) via crafted OSPFv3 packets, aka Bug ID CSCuz66289 Affected: 6.0.0; 6.0.1; 6.0_base |
| CVE-2016-1376 | 5.3 | Apr 12 | Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit… Affected: 4.2.3; 4.3.0; 4.3.4; 5.3.1 |
| CVE-2016-1361 | 5.3 | Mar 12 | Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows… Affected: 3.3.3; 3.4.1; 3.4.2; 3.4.3; 3.5.2; 3.5.3; +28 more |
| CVE-2023-20064 | 4.6 | Mar 9 | A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files… Affected: before 7.9.1; before 7.6.1; before 7.7.1 |