Cisco

Ios Xr Software

34 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.6

CVE-2025-20146

  • EPSS 0.44%
  • Veröffentlicht 12.03.2025 16:12:56
  • Zuletzt bearbeitet 01.08.2025 18:50:42

A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated,...

5.8

CVE-2025-20145

  • EPSS 0.1%
  • Veröffentlicht 12.03.2025 16:12:48
  • Zuletzt bearbeitet 04.08.2025 12:03:18

A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled ...

5.8

CVE-2025-20144

  • EPSS 0.08%
  • Veröffentlicht 12.03.2025 16:12:39
  • Zuletzt bearbeitet 04.08.2025 12:02:45

A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect handling of packets when...

6.7

CVE-2025-20143

  • EPSS 0.02%
  • Veröffentlicht 12.03.2025 16:12:31
  • Zuletzt bearbeitet 22.07.2025 12:28:22

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, ...

8.6

CVE-2025-20142

  • EPSS 0.33%
  • Veröffentlicht 12.03.2025 16:12:23
  • Zuletzt bearbeitet 01.08.2025 18:40:27

A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS) policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact...

7.4

CVE-2025-20141

  • EPSS 0.07%
  • Veröffentlicht 12.03.2025 16:12:15
  • Zuletzt bearbeitet 06.08.2025 17:05:07

A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multi...

8.8

CVE-2025-20138

  • EPSS 0.04%
  • Veröffentlicht 12.03.2025 16:12:06
  • Zuletzt bearbeitet 31.07.2025 18:11:01

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation o...

8.6

CVE-2025-20115

  • EPSS 0.97%
  • Veröffentlicht 12.03.2025 16:11:58
  • Zuletzt bearbeitet 01.08.2025 16:13:48

A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to a memory...

7.7

CVE-2025-20172

  • EPSS 0.3%
  • Veröffentlicht 05.02.2025 17:15:24
  • Zuletzt bearbeitet 03.07.2025 15:48:37

A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error...

6.8

CVE-2021-1440

  • EPSS 0.75%
  • Veröffentlicht 18.11.2024 16:15:10
  • Zuletzt bearbeitet 01.08.2025 18:28:33

A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a d...