Cisco IOS XR vulnerabilities

171 known vulnerabilities affecting cisco/ios_xr.

Total CVEs
171
CISA KEV
9
actively exploited
Public exploits
3
Exploited in wild
10
Severity breakdown
CRITICAL3HIGH88MEDIUM77LOW3

Vulnerabilities

Page 8 of 9
CVE-2014-3379MEDIUMCVSS 6.1v2.0v3.0+53 more2014-09-20
CVE-2014-3379 [MEDIUM] CWE-20 CVE-2014-3379: Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to c Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466.
nvd
CVE-2014-3343MEDIUMCVSS 4.3v5.1.02014-09-10
CVE-2014-3343 [MEDIUM] CWE-20 CVE-2014-3343: Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a ma Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a malformed DHCPv6 packet, aka Bug ID CSCuo59052.
nvd
CVE-2014-3353HIGHCVSS 7.1≤ 4.3.2v4.3.0+1 more2014-09-04
CVE-2014-3353 [HIGH] CWE-399 CVE-2014-3353: Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attac Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.
nvd
CVE-2014-3335MEDIUMCVSS 4.6≤ 4.3.2v4.3.0+1 more2014-08-26
CVE-2014-3335 [MEDIUM] CWE-20 CVE-2014-3335: Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of p Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.
nvd
CVE-2014-3322MEDIUMCVSS 6.1≤ 4.3.2v4.3.0+1 more2014-07-24
CVE-2014-3322 [MEDIUM] CWE-20 CVE-2014-3322: Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of I Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuo68417.
nvd
CVE-2014-3321MEDIUMCVSS 5.7≤ 4.3.4v4.3.0+2 more2014-07-18
CVE-2014-3321 [MEDIUM] CWE-20 CVE-2014-3321: Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routin Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149.
nvd
CVE-2014-2176HIGHCVSS 7.1v4.1.2v4.2.0+3 more2014-06-14
CVE-2014-2176 [HIGH] CWE-399 CVE-2014-2176: Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSCun71928.
nvd
CVE-2013-5565MEDIUMCVSS 4.3v5.1.02013-11-08
CVE-2013-5565 [MEDIUM] CWE-119 CVE-2013-5565: The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (p The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176.
nvd
CVE-2013-5549HIGHCVSS 7.1v3.8.1v3.8.2+14 more2013-10-25
CVE-2013-5549 [HIGH] CVE-2013-5549: Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service (transmission outage) via (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCuh30380.
nvd
CVE-2013-5503HIGHCVSS 7.8v4.3.12013-10-02
CVE-2013-5503 [HIGH] CWE-399 CVE-2013-5503: The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka Bug ID CSCue69413.
nvd
CVE-2013-3464MEDIUMCVSS 4.6v2.0\(.0\)v3.0\(.0\)+55 more2013-08-13
CVE-2013-3464 [MEDIUM] CWE-119 CVE-2013-3464: Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corrup Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347.
nvd
CVE-2012-4617HIGHCVSS 7.1v4.1v4.1.1+4 more2012-09-27
CVE-2012-4617 [HIGH] CWE-20 CVE-2012-4617: The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2. The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection resets) by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248, and CSCtz62914.
nvd
CVE-2012-2488HIGHCVSS 7.8≤ 4.2.0v4.0.3+5 more2012-05-31
CVE-2012-2488 [HIGH] CWE-20 CVE-2012-2488: Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593.
nvd
CVE-2011-3295HIGHCVSS 7.8v3.8.0v3.8.1+12 more2012-05-02
CVE-2011-3295 [HIGH] CWE-20 CVE-2011-3295: The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing Sy The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.
nvd
CVE-2011-2549HIGHCVSS 7.8v4.1.02011-07-28
CVE-2011-2549 [HIGH] CVE-2011-2549: Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers ( Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service (line-card reload) via an IPv4 packet, aka Bug ID CSCtr26695.
nvd
CVE-2011-1651HIGHCVSS 7.8v3.0v3.9.0+6 more2011-05-31
CVE-2011-1651 [HIGH] CWE-399 CVE-2011-1651: Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCto45095.
nvd
CVE-2011-0943HIGHCVSS 7.8v3.8.3v3.8.4+1 more2011-05-31
CVE-2011-0943 [HIGH] CWE-399 CVE-2011-0943: Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO pro Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147.
nvd
CVE-2011-0949HIGHCVSS 7.8v3.6.0v3.6.1+6 more2011-05-31
CVE-2011-0949 [HIGH] CWE-399 CVE-2011-0949: Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock fi Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417.
nvd
CVE-2010-3035HIGHCVSS 7.5KEV≥ 3.4.0, ≤ 3.9.12010-08-30
CVE-2010-3035 [HIGH] CVE-2010-3035: Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transit Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
nvd
CVE-2010-0576HIGHCVSS 7.8v3.2v3.2.1+13 more2010-03-25
CVE-2010-0576 [HIGH] CVE-2010-0576: Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, a Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 an
nvd
← Previous8 / 9Next →