IX
Product
IOS XR
On CISA KEVExploited in the wild
199
CVEs
9
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 79Medium 53Low 0
Watch
Add IOS XR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3118 In wildKEV | 8.8 | Feb 5 | Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability Affected: 6.6.0 before 6.6.12; 7.0.0 before 7.0.2; 6.5.3; 5.2.5; 6.4.2; 6.6.25; +1 more |
| CVE-2018-0167 In wildKEV | 8.8 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 4.1 before 5.1.3 |
| CVE-2020-3569 In wildKEV | 8.6 | Sep 23 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities Affected: 6.1.4; 6.2.3; 6.3.3; 6.4.2; 6.5.3; 6.6.2; +8 more |
| CVE-2020-3566 In wildKEV | 8.6 | Aug 29 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Affected: 6.4.2 |
| CVE-2018-0175 In wildKEV | 8.0 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 15.4(3)m4.1 |
| CVE-2016-6415 In wildKEV | 7.5 | Sep 19 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Affected: 4.3.0 through 4.3.4; 5.0.0 before 5.3.0 |
| CVE-2010-3035 In wildKEV | 7.5 | Aug 30 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Affected: 3.4.0 through 3.9.1 |
| CVE-2026-20280 | 8.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.25; 6.5.26; 6.5.28; 6.5.29; 6.5.31; 6.5.32; +34 more |
| CVE-2026-20046 | 8.8 | Mar 11 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full… Affected: before 25.2.2 |
| CVE-2026-20040 | 8.8 | Mar 11 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an… Affected: before 25.2.21; 25.3.1 before 25.4.2 |
| CVE-2025-20138 | 8.8 | Mar 12 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an… Affected: before 24.2.21; 24.3 before 24.4 |
| CVE-2024-20381 | 8.8 | Sep 11 | A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.15; 6.5.25; 6.5.26; +34 more |
| CVE-2020-3217 | 8.8 | Jun 3 | A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software… Affected: All versions, or not specified |
| CVE-2026-20276 | 8.6 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.25; 6.5.26; 6.5.28; 6.5.29; 6.5.31; 6.5.32; +34 more |
| CVE-2025-20154 | 8.6 | May 7 | A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.15; 6.5.25; 6.5.26; +34 more |
| CVE-2025-20146 | 8.6 | Mar 12 | A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and… Affected: 7.9.21; 7.10.2; 7.11.1; 7.11.2; 7.11.21; 24.1.1; +5 more |
| CVE-2025-20142 | 8.6 | Mar 12 | A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS) policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services… Affected: 6.7.2; 6.7.3; 6.7.35; 6.8.1; 6.8.2; 6.9.1; +28 more |
| CVE-2025-20115 | 8.6 | Mar 12 | A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.15; 6.5.25; 6.5.26; +34 more |
| CVE-2022-20714 | 8.6 | Apr 15 | A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to… Affected: All versions, or not specified |
| CVE-2021-34720 | 8.6 | Sep 9 | A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an… Affected: before 6.2.3; 6.3.0 before 6.3.2; 6.5.0 before 7.2.2; before 6.2.3; 6.3.0 before 6.3.2; 6.5.0 before 7.2.2; +21 more |
| CVE-2020-26070 | 8.6 | Nov 12 | A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote… Affected: before 6.7.2; 7.1.0 before 7.1.2 |
| CVE-2019-16019 | 8.6 | Sep 23 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 6.6.1; 6.6.2; 6.6.25; 7.0.1 |
| CVE-2019-16022 | 8.6 | Jan 26 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 6.6.1; 6.6.2; 6.6.25; 7.0.1 |
| CVE-2019-16020 | 8.6 | Jan 26 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 6.6.1; 6.6.2; 6.6.25; 7.0.1 |
| CVE-2019-15989 | 8.6 | Jan 26 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial… Affected: 6.6.1; 6.6.2; 6.6.25; 7.0.1 |
| CVE-2019-1686 | 8.6 | Apr 17 | A vulnerability in the TCP flags inspection feature for access control lists (ACLs) on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote… Affected: 5.1.1 before 6.5.2; 6.5.3 before 6.6.1 |
| CVE-2018-0418 | 8.6 | Aug 15 | A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote… Affected: through 6.3.3_base |
| CVE-2018-0136 | 8.6 | Jan 31 | A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series could allow an unauthenticated, remote… Affected: 5.3.4 |
| CVE-2020-3530 | 8.4 | Sep 4 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though… Affected: before 7.1.2 |
| CVE-2021-34718 | 8.1 | Sep 9 | A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to overwrite and read arbitrary files on the local device Affected: before 7.3.2; 7.4.0 before 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; +10 more |
| CVE-2024-20398 | 7.8 | Sep 11 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an… Affected: 6.5.1; 6.5.2; 6.5.3; 6.5.15; 6.5.25; 6.5.26; +34 more |
| CVE-2024-20320 | 7.8 | Mar 13 | A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Convergence System (NCS) 540 Series and 5700 Series Routers… Affected: 7.2.1; 7.2.2; 7.3.1; 7.3.2; 7.3.3; 7.3.5; +19 more |
| CVE-2023-20236 | 7.8 | Sep 13 | A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device Affected: before 7.10.1 |
| CVE-2021-34728 | 7.8 | Sep 9 | Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device Affected: before 7.3.2; 7.4.0 before 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; +12 more |
| CVE-2021-34719 | 7.8 | Sep 9 | Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device Affected: before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; +12 more |
| CVE-2021-1485 | 7.8 | Apr 8 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges on the… Affected: before 7.3.1 |
| CVE-2021-1370 | 7.8 | Feb 4 | A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L software images could… Affected: before 7.0.12; 7.1.0 before 7.2.1; before 7.2.1 |
| CVE-2020-3473 | 7.8 | Sep 4 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full… Affected: 5.0.0 before 7.0.12; 7.1.0 before 7.2.1; 5.0.0 before 6.6.3; 7.0.0 before 7.0.2; 7.1.0 before 7.1.1; 5.0.0 before 6.5.29 |
| CVE-2016-9215 | 7.8 | Dec 14 | A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user Affected: 6.1.1 |
| CVE-2016-6428 | 7.8 | Oct 6 | Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349 Affected: 6.1.1 |
| CVE-2016-1456 | 7.8 | Jul 15 | The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID… Affected: 6.0.0; 6.0.1; 6.0_base |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 7.0.1; 7.0.2; 7.0.12; 7.0.14; 7.1.1; 7.1.2; +34 more |
| CVE-2025-20209 | 7.5 | Mar 12 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from… Affected: 6.5.1; 6.5.2; 6.5.3; 6.6.1; 6.6.2; 6.6.3; +34 more |
| CVE-2024-20304 | 7.5 | Sep 11 | A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the UDP packet memory… Affected: 7.7.1; 7.7.2; 7.7.21; 7.8.1; 7.8.2; 7.8.12; +12 more |
| CVE-2023-20191 | 7.5 | Sep 13 | A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to… Affected: before 7.7.21; 7.8 before 7.9.2; 7.10 |
| CVE-2023-20049 | 7.5 | Mar 9 | A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902… Affected: before 7.5.3; 7.6 before 7.6.2; 7.7 |
| CVE-2021-34737 | 7.5 | Sep 9 | A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of the dhcpd process,… Affected: before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 through 7.4.1; before 7.3.2; 7.4.0 before 7.4.1; +6 more |
| CVE-2021-1313 | 7.5 | Feb 4 | Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 5.0.0 before 5.2.6; 5.3.0 before 5.3.4 |
| CVE-2021-1288 | 7.5 | Feb 4 | Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 5.0.0 before 5.2.6; 5.3.0 before 5.3.4; 6.0.0 before 6.0.2 |
| CVE-2021-1243 | 7.5 | Feb 4 | A vulnerability in the Local Packet Transport Services (LPTS) programming of the SNMP with the management plane protection feature of Cisco IOS XR Software could allow an… Affected: after 6.1.1 before 6.6.4; 7.0.0 before 7.0.2; 6.7.1; 7.0.11; 7.1.0; 7.2.0 |