IX
Product
IOS XR
On CISA KEVExploited in the wild
199
CVEs
9
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 79Medium 53Low 0
Watch
Add IOS XR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20191 | 7.5 | Sep 13 | A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to… Affected: before 7.7.21; 7.8 before 7.9.2; 7.10 |
| CVE-2023-20049 | 7.5 | Mar 9 | A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902… Affected: before 7.5.3; 7.6 before 7.6.2; 7.7 |
| CVE-2021-34737 | 7.5 | Sep 9 | A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of the dhcpd process,… Affected: before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; +6 more |
| CVE-2021-1313 | 7.5 | Feb 4 | Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 5.0.0 before 5.2.6; 5.3.0 before 5.3.4 |
| CVE-2021-1288 | 7.5 | Feb 4 | Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 5.0.0 before 5.2.6; 5.3.0 before 5.3.4; 6.0.0 before 6.0.2 |
| CVE-2021-1243 | 7.5 | Feb 4 | A vulnerability in the Local Packet Transport Services (LPTS) programming of the SNMP with the management plane protection feature of Cisco IOS XR Software could allow an… Affected: after 6.1.1 before 6.6.4; 7.0.0 before 7.0.2; 6.7.1; 7.0.11; 7.1.0; 7.2.0 |
| CVE-2019-16023 | 7.5 | Sep 23 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 6.6.1; 6.6.2; 6.6.25; 7.0.1 |
| CVE-2019-16021 | 7.5 | Sep 23 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 6.6.1; 6.6.2; 6.6.25; 7.0.1 |
| CVE-2019-1712 | 7.5 | Apr 17 | A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the PIM process to restart,… Affected: before 6.2.3; 6.2.25 before 6.3.2; 6.3.3 before 6.4.0; 6.4.1 before 6.5.1 |
| CVE-2019-1711 | 7.5 | Apr 17 | A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 6.1.0 before 6.5.1 |
| CVE-2019-1681 | 7.5 | Feb 21 | Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability Affected: before 6.5.2 |
| CVE-2017-12270 | 7.5 | Oct 5 | A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticated, remote attacker to cause a… Affected: All versions, or not specified |
| CVE-2017-6731 | 7.5 | Jul 10 | A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP… Affected: 4.3.2.mcast; 6.0.2.base |
| CVE-2017-3876 | 7.5 | May 16 | A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 6.1.0; 6.1.1 |
| CVE-2016-9205 | 7.5 | Dec 14 | A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd)… Affected: 6.1.1 |
| CVE-2016-6355 | 7.5 | Aug 23 | Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service… Affected: 5.1.0; 5.1.1; 5.1.1.k9sec; 5.1.2; 5.1.3; 5.2.0; +8 more |
| CVE-2016-1426 | 7.5 | Jul 15 | Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service (timer consumption and Route Processor reload) via crafted SSH traffic, aka… Affected: 5.0.0; 5.0.1; 5.0_base; 5.1.0; 5.1.1; 5.1.1.k9sec; +8 more |
| CVE-2016-1409 | 7.5 | May 29 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a… Affected: 2.0.0; 3.0.0; 3.0.1; 3.2.0; 3.2.1; 3.2.2; +34 more |
| CVE-2016-1407 | 7.5 | May 25 | Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making… Affected: 2.0.0; 3.0.0; 3.0.1; 3.2.0; 3.2.1; 3.2.2; +34 more |
| CVE-2015-6432 | 7.5 | Jan 5 | Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area… Affected: 4.2.0; 4.3.0; 5.0.0; 5.1.0; 5.2.0; 5.2.2; +3 more |
| CVE-2026-20074 | 7.4 | Mar 11 | Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability Affected: 7.8.0 before 25.2.2; 25.3.0 |
| CVE-2025-20141 | 7.4 | Mar 12 | A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated,… Affected: 7.9.2 |
| CVE-2024-20406 | 7.4 | Sep 11 | A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS XR Software could allow an unauthenticated,… Affected: 6.8.1 before 7.0.0; 7.4.1 before 7.11.2 |
| CVE-2024-20317 | 7.4 | Sep 11 | A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System (NCS) platforms could allow an unauthenticated,… Affected: 7.7.1; 7.7.2; 7.7.21; 7.8.1; 7.8.2; 7.8.22; +4 more |
| CVE-2024-20327 | 7.4 | Mar 13 | A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an… Affected: before 7.9.21; 7.10 before 7.10.1; 7.11 before 7.11.1 |
| CVE-2021-34714 | 7.4 | Sep 23 | A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS… Affected: through 8.4\(3.115\); through 7.0\(3\)i7\(9\); through 7.3\(8\)n1\(1\); through 3.2\(3o\)a; through 4.1\(1a\)a |
| CVE-2021-34713 | 7.4 | Sep 9 | A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker… Affected: 6.4 before 6.6.3; 6.7 before 6.7.1; 7.0 before 7.0.2; 7.1 before 7.1.1 |
| CVE-2019-1918 | 7.4 | Aug 7 | A vulnerability in the implementation of Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow… Affected: 6.5.2 before 6.6.3 |
| CVE-2019-1910 | 7.4 | Aug 7 | A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could… Affected: before 6.6.3 |
| CVE-2019-1846 | 7.4 | May 16 | A vulnerability in the Multiprotocol Label Switching (MPLS) Operations, Administration, and Maintenance (OAM) implementation of Cisco IOS XR Software for Cisco ASR 9000 Series… Affected: 5.3.3 |
| CVE-2018-0241 | 7.4 | Apr 19 | A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on… Affected: 4.0.4.base; 4.1.3.base; 4.2.4.base; 4.3.4.base; 4.4.3.ce; 5.0.3.ce; +7 more |
| CVE-2024-20483 | 7.2 | Sep 11 | Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an… Affected: 24.1.1; 24.1.2; 24.2.1; 24.2.11; 24.3.1 |
| CVE-2021-40120 | 7.2 | Nov 4 | A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative… Affected: 4.2.3.06 |
| CVE-2023-20135 | 7.0 | Sep 13 | A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system Affected: 7.5.2 before 7.6; 7.7 before 7.10.1 |
| CVE-2017-6728 | 7.0 | Jul 10 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system,… Affected: All versions, or not specified |
| CVE-2021-1440 | 6.8 | Nov 18 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to… Affected: 4.3.0 before 7.3.1 |
| CVE-2022-20758 | 6.8 | Apr 15 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote… Affected: before 6.8.2; 7.0 before 7.3.2; 7.4 before 7.4.2 |
| CVE-2018-15428 | 6.8 | Oct 5 | A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 6.0.1; 6.0.2; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +4 more |
| CVE-2025-20177 | 6.7 | Mar 12 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified… Affected: before 7.11.21; 24.2 before 24.2.2; 24.3 before 24.3.2; 24.4 |
| CVE-2025-20143 | 6.7 | Mar 12 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load… Affected: before 7.9.1 |
| CVE-2024-20456 | 6.7 | Jul 10 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and… Affected: 24.2.1 |
| CVE-2021-34722 | 6.7 | Sep 9 | Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and… Affected: 7.1.1 before 7.3.2; 7.4.0 before 7.4.1; 7.1.1 before 7.3.2; 7.4.0 before 7.4.1; 7.1.1 before 7.3.2; 7.4.0 before 7.4.1; +10 more |
| CVE-2021-34721 | 6.7 | Sep 9 | Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and… Affected: before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; +10 more |
| CVE-2021-34708 | 6.7 | Sep 9 | Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and… Affected: before 7.3.2; before 7.3.2; 7.4.0 before 7.4.1 |
| CVE-2021-1244 | 6.7 | Feb 4 | Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the… Affected: before 7.0.12; 7.1.0 before 7.2.1; before 7.2.1 |
| CVE-2021-1136 | 6.7 | Feb 4 | Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the… Affected: before 7.0.12; 7.1.0 before 7.2.1; before 7.2.1 |
| CVE-2019-12709 | 6.7 | Sep 25 | A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an… Affected: 5.1.0 before 6.5.3; 6.6.0 before 6.6.2 |
| CVE-2019-1649 | 6.7 | May 13 | A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local… Affected: 7.0.1; 7.1.1 |
| CVE-2017-6719 | 6.7 | Jul 4 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges,… Affected: 6.0.2; 6.0.2.01 |
| CVE-2017-6718 | 6.7 | Jul 4 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level Affected: 6.0.2; 6.0.2.01 |