IX
Product
IOS XR
On CISA KEVExploited in the wild
199
CVEs
9
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 79Medium 53Low 0
Watch
Add IOS XR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-0618 | – | Feb 21 | Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X (CRS-X) devices allows remote attackers to cause a… Affected: 5.0.1; 5.2.1 |
| CVE-2014-8014 | – | Dec 18 | Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCub63710 Affected: All versions, or not specified |
| CVE-2014-8005 | – | Nov 26 | Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (process… Affected: through 5.1.0 |
| CVE-2014-8004 | – | Nov 25 | Cisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) by establishing many LISP TCP sessions, aka Bug ID CSCuq90378 Affected: All versions, or not specified |
| CVE-2014-3396 | – | Oct 5 | Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card… Affected: All versions, or not specified |
| CVE-2014-3379 | – | Sep 20 | Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS… Affected: 2.0; 3.0; 3.0.1; 3.1; 3.1.0; 3.2; +34 more |
| CVE-2014-3378 | – | Sep 20 | tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed TACACS+ packet, aka Bug ID CSCum00468 Affected: 2.0; 3.0; 3.0.1; 3.1; 3.1.0; 3.2; +34 more |
| CVE-2014-3377 | – | Sep 20 | snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 packet, aka Bug ID CSCun67791 Affected: 2.0; 3.0; 3.0.1; 3.1; 3.1.0; 3.2; +34 more |
| CVE-2014-3376 | – | Sep 20 | Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID CSCuq12031 Affected: 2.0; 3.0; 3.0.1; 3.1; 3.1.0; 3.2; +34 more |
| CVE-2014-3342 | – | Sep 12 | The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383 Affected: All versions, or not specified |
| CVE-2014-3343 | – | Sep 10 | Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a malformed DHCPv6 packet, aka Bug ID CSCuo59052 Affected: 5.1.0 |
| CVE-2014-3353 | – | Sep 4 | Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a… Affected: through 4.3.2; 4.3.0; 4.3.1 |
| CVE-2014-3335 | – | Aug 26 | Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers… Affected: through 4.3.2; 4.3.0; 4.3.1 |
| CVE-2014-3322 | – | Jul 24 | Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and… Affected: through 4.3.2; 4.3.0; 4.3.1 |
| CVE-2014-3321 | – | Jul 18 | Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and… Affected: through 4.3.4; 4.3.0; 4.3.1; 4.3.2 |
| CVE-2014-3308 | – | Jul 7 | Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many… Affected: All versions, or not specified |
| CVE-2014-2176 | – | Jun 14 | Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload)… Affected: 4.1.2; 4.2.0; 4.3.1; 5.1.0; 5.1.1 |
| CVE-2014-3271 | – | May 20 | The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949,… Affected: All versions, or not specified |
| CVE-2014-3270 | – | May 20 | The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCul80924 Affected: All versions, or not specified |
| CVE-2014-2144 | – | Apr 5 | Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect… Affected: All versions, or not specified |
| CVE-2013-6700 | – | Nov 29 | The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process reload) via a request for an unspecified MIB, aka Bug ID CSCuh43144 Affected: All versions, or not specified |
| CVE-2013-5565 | – | Nov 8 | The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176 Affected: 5.1.0 |
| CVE-2013-5549 | – | Oct 25 | Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to… Affected: 3.8.1; 3.8.2; 3.8.3; 3.8.4; 3.9.0; 3.9.1; +10 more |
| CVE-2013-5503 | – | Oct 2 | The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory… Affected: 4.3.1 |
| CVE-2013-5498 | – | Sep 27 | The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of… Affected: All versions, or not specified |
| CVE-2013-3470 | – | Aug 30 | The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID CSCue46731 Affected: All versions, or not specified |
| CVE-2013-3464 | – | Aug 13 | Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood… Affected: 2.0(.0); 3.0(.0); 3.0(.1); 3.2(.0); 3.2(.1); 3.2(.2); +34 more |
| CVE-2013-1204 | – | May 23 | Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service (memory consumption or process reload) by sending many port-162 UDP packets,… Affected: All versions, or not specified |
| CVE-2013-1234 | – | May 3 | The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (process restart) via crafted SNMP packets, aka Bug ID CSCue69472 Affected: All versions, or not specified |
| CVE-2013-1216 | – | Apr 29 | Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (memory consumption and process restart) via crafted SNMP packets,… Affected: All versions, or not specified |
| CVE-2013-1162 | – | Mar 26 | The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (process restart) via crafted TE packets, aka Bug ID… Affected: All versions, or not specified |
| CVE-2012-4617 | – | Sep 27 | The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection… Affected: 4.1; 4.1.1; 4.1.2; 4.2.0; 4.2.1; 4.2.2 |
| CVE-2012-2488 | – | May 31 | Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet,… Affected: through 4.2.0; 4.0.3; 4.0.4; 4.1; 4.1.1; 4.1.2; +1 more |
| CVE-2011-3295 | – | May 2 | The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service… Affected: 3.8.0; 3.8.1; 3.8.2; 3.8.3; 3.8.4; 3.9.0; +8 more |
| CVE-2011-2549 | – | Jul 28 | Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service… Affected: 4.1.0 |
| CVE-2011-1651 | – | May 31 | Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service (device… Affected: 3.0; 3.9.0; 3.9.1; 3.9.2; 4.0.0; 4.0.1; +2 more |
| CVE-2011-0949 | – | May 31 | Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service… Affected: 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.8.0; 3.8.1; +2 more |
| CVE-2011-0943 | – | May 31 | Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147 Affected: 3.8.3; 3.8.4; 3.9.1 |
| CVE-2010-0576 | – | Mar 25 | Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and… Affected: 3.2; 3.2.1; 3.2.2; 3.2.4; 3.2.50; 3.3.0; +9 more |
| CVE-2010-0137 | – | Jan 21 | Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process… Affected: 3.4.1; 3.4.2; 3.4.3; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2009-2056 | – | Aug 21 | Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers… Affected: through 3.8.1; 3.0; 3.0.1; 3.1; 3.1.0; 3.2; +27 more |
| CVE-2009-1154 | – | Aug 21 | Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS… Affected: through 3.8.1; 3.4; 3.4.0; 3.4.1; 3.4.2; 3.4.3; +13 more |
| CVE-2009-0637 | – | Mar 27 | The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote… Affected: 12.4 |
| CVE-2009-0629 | – | Mar 27 | The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5)… Affected: 12.4 |
| CVE-2008-1159 | – | May 22 | Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors, aka Bug ID (1)… Affected: 12.4 |
| CVE-2007-4430 | – | Aug 20 | Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain… Affected: 2.0; 3.0; 3.1; 3.2; 3.3; 3.4 |
| CVE-2006-1928 | – | Apr 20 | Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services… Affected: 3.0.1; 3.1.0; 3.2; 3.2.1; 3.2.2; 3.2.3; +3 more |
| CVE-2006-1927 | – | Apr 20 | Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of… Affected: 3.0.1; 3.1.0; 3.2; 3.2.1; 3.2.2; 3.2.3; +3 more |
| CVE-2005-2451 | – | Aug 3 | Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly… Affected: 3.0.1; 3.1.0 |