Cisco Ios Xr Software (Cisco) - vulnerabilities (CVEs)

115 CVEs, 1 in the last 30 days, 162 known versions, newest CVE from 2026-10-21. Vendor: Cisco.

CVEs of Cisco Ios Xr Software

CVE-2026-76505 - CVSS 7.5 (high), 2026-10-21: A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers…
CVE-2026-20279 - CVSS 9.8 (critical), 2026-09-02: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive…
CVE-2026-20278 - CVSS 8.8 (high), 2026-09-02: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive…
CVE-2026-20277 - CVSS 8.2 (high), 2026-09-02: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive…
CVE-2026-20280 - CVSS 8.8 (high), 2026-09-02: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive…
CVE-2026-20276 - CVSS 8.6 (high), 2026-09-02: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive…
CVE-2026-20275 - CVSS 8.8 (high), 2026-09-02: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive…
CVE-2026-20274 - CVSS 9.8 (critical), 2026-09-02: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive…
CVE-2026-20118 - CVSS 6.8 (medium), 2026-03-11: A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System…
CVE-2026-20074 - CVSS 7.4 (high), 2026-03-11: A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco IOS XR Software could allow an…
CVE-2026-20046 - CVSS 8.8 (high), 2026-03-11: A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate…
CVE-2026-20040 - CVSS 8.8 (high), 2026-03-11: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying…
CVE-2025-20363 - CVSS 9 (critical), 2025-09-25: A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software,…
CVE-2025-20340 - CVSS 7.4 (high), 2025-09-10: A vulnerability in the Address Resolution Protocol (ARP) implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger…
CVE-2025-20248 - CVSS 6 (medium), 2025-09-10: A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR Software image…
CVE-2025-20159 - CVSS 5.3 (medium), 2025-09-10: A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software could allow an unauthenticated, remote…
CVE-2025-20154 - CVSS 8.6 (high), 2025-05-07: A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an…
CVE-2025-20177 - CVSS 6.7 (medium), 2025-03-12: A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification…
CVE-2025-20146 - CVSS 8.6 (high), 2025-03-12: A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact…
CVE-2025-20145 - CVSS 5.8 (medium), 2025-03-12: A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker…
CVE-2025-20209 - CVSS 7.5 (high), 2025-03-12: A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an…
CVE-2025-20144 - CVSS 5.8 (medium), 2025-03-12: A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to…
CVE-2025-20138 - CVSS 8.8 (high), 2025-03-12: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying…
CVE-2025-20143 - CVSS 6.7 (medium), 2025-03-12: A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot…
CVE-2025-20115 - CVSS 8.6 (high), 2025-03-12: A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote…
CVE-2025-20142 - CVSS 8.6 (high), 2025-03-12: A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS) policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series…
CVE-2025-20141 - CVSS 7.4 (high), 2025-03-12: A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow…
CVE-2025-20172 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to…
CVE-2021-1440 - CVSS 6.8 (medium), 2024-11-18: A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated,…
CVE-2022-20849 - CVSS 6.1 (medium), 2024-11-15: A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent…
CVE-2022-20846 - CVSS 4.3 (medium), 2024-11-15: A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause…
CVE-2022-20845 - CVSS 6 (medium), 2024-11-15: A vulnerability in the TL1 function of Cisco Network Convergence System (NCS) 4000 Series could allow an authenticated, local attacker to cause a memory…
CVE-2022-20655 - CVSS 8.8 (high), 2024-11-15: A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection…
CVE-2024-20483 - CVSS 7.2 (high), 2024-09-11: Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software,…
CVE-2024-20406 - CVSS 7.4 (high), 2024-09-11: A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS XR Software could allow an…
CVE-2024-20489 - CVSS 8.4 (high), 2024-09-11: A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the…
CVE-2024-20390 - CVSS 5.3 (medium), 2024-09-11: A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2024-20381 - CVSS 8.8 (high), 2024-09-11: A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management…
CVE-2024-20343 - CVSS 5.5 (medium), 2024-09-11: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlying Linux…
CVE-2024-20398 - CVSS 8.8 (high), 2024-09-11: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying…
CVE-2024-20317 - CVSS 7.4 (high), 2024-09-11: A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System (NCS) platforms could allow…
CVE-2024-20304 - CVSS 8.6 (high), 2024-09-11: A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust…
CVE-2024-20456 - CVSS 6.7 (medium), 2024-07-10: A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot…
CVE-2024-20322 - CVSS 5.8 (medium), 2024-03-13: A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an…
CVE-2024-20320 - CVSS 7.8 (high), 2024-03-13: A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Convergence System (NCS) 540 Series and…
CVE-2024-20319 - CVSS 4.3 (medium), 2024-03-13: A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane…
CVE-2024-20327 - CVSS 7.4 (high), 2024-03-13: A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could…
CVE-2024-20262 - CVSS 6.5 (medium), 2024-03-13: A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or…
CVE-2024-20318 - CVSS 7.4 (high), 2024-03-13: A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network…
CVE-2024-20315 - CVSS 5.8 (medium), 2024-03-13: A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an…
CVE-2024-20266 - CVSS 5.3 (medium), 2024-03-13: A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of…
CVE-2023-20191 - CVSS 7.5 (high), 2023-09-13: A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an…
CVE-2023-20190 - CVSS 5.8 (medium), 2023-09-13: A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to…
CVE-2023-20236 - CVSS 7.8 (high), 2023-09-13: A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an…
CVE-2023-20135 - CVSS 7 (high), 2023-09-13: A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying…
CVE-2023-20233 - CVSS 6.5 (medium), 2023-09-13: A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial…
CVE-2023-20049 - CVSS 8.6 (high), 2023-03-09: A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation…
CVE-2023-20064 - CVSS 4.6 (medium), 2023-03-09: A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to…
CVE-2022-20821 - CVSS 6.5 (medium), 2022-05-26: A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running…
CVE-2022-20714 - CVSS 8.6 (high), 2022-04-15: A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an…
CVE-2022-20758 - CVSS 6.8 (medium), 2022-04-15: A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an…
CVE-2021-34771 - CVSS 5.5 (medium), 2021-09-09: A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information than their privileges allow. This…
CVE-2021-34720 - CVSS 8.6 (high), 2021-09-09: A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could…
CVE-2021-34728 - CVSS 7.8 (high), 2021-09-09: Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges…
CVE-2021-34719 - CVSS 7.8 (high), 2021-09-09: Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges…
CVE-2021-34722 - CVSS 6.7 (medium), 2021-09-09: Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an…
CVE-2021-34718 - CVSS 8.1 (high), 2021-09-09: A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to overwrite and read arbitrary files on the…
CVE-2021-34721 - CVSS 6.7 (medium), 2021-09-09: Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an…
CVE-2021-34737 - CVSS 7.5 (high), 2021-09-09: A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of…
CVE-2021-34713 - CVSS 7.4 (high), 2021-09-09: A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an…
CVE-2021-34709 - CVSS 6.4 (medium), 2021-09-09: Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L…
CVE-2021-34708 - CVSS 6.7 (medium), 2021-09-09: Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L…
CVE-2021-1485 - CVSS 7.8 (high), 2021-04-08: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root…
CVE-2021-1389 - CVSS 6.5 (medium), 2021-02-04: A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices could allow an unauthenticated,…
CVE-2021-1370 - CVSS 7.8 (high), 2021-02-04: A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L…
CVE-2021-1288 - CVSS 8.6 (high), 2021-02-04: Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial…
CVE-2021-1313 - CVSS 8.6 (high), 2021-02-04: Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial…
CVE-2021-1243 - CVSS 7.5 (high), 2021-02-04: A vulnerability in the Local Packet Transport Services (LPTS) programming of the SNMP with the management plane protection feature of Cisco IOS XR Software…
CVE-2021-1136 - CVSS 6.7 (medium), 2021-02-04: Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS…
CVE-2021-1268 - CVSS 7.4 (high), 2021-02-04: A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause…
CVE-2021-1128 - CVSS 5.5 (medium), 2021-02-04: A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow.…
CVE-2021-1244 - CVSS 6.7 (medium), 2021-02-04: Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS…
CVE-2020-26070 - CVSS 8.6 (high), 2020-11-12: A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an…
CVE-2020-3284 - CVSS 9.8 (critical), 2020-11-06: A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote…
CVE-2020-3569 - CVSS 8.6 (high), 2020-09-23: Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote…
CVE-2019-16023 - CVSS 8.6 (high), 2020-09-23: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an…
CVE-2019-16021 - CVSS 8.6 (high), 2020-09-23: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an…
CVE-2019-16019 - CVSS 8.6 (high), 2020-09-23: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an…
CVE-2020-3473 - CVSS 7.8 (high), 2020-09-04: A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate…
CVE-2020-3530 - CVSS 8.4 (high), 2020-09-04: A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that…
CVE-2020-3566 - CVSS 8.6 (high), 2020-08-29: A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to…
CVE-2020-3449 - CVSS 4.3 (medium), 2020-08-17: A vulnerability in the Border Gateway Protocol (BGP) additional paths feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to…
CVE-2020-3364 - CVSS 5.3 (medium), 2020-06-18: A vulnerability in the access control list (ACL) functionality of the standby route processor management interface of Cisco IOS XR Software could allow an…
CVE-2020-3217 - CVSS 8.8 (high), 2020-06-03: A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and…
CVE-2020-3190 - CVSS 5.8 (medium), 2020-03-04: A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to cause a denial of service (DoS)…
CVE-2020-3120 - CVSS 7.4 (high), 2020-02-05: A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an…
CVE-2020-3118 - CVSS 8.8 (high), 2020-02-05: A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute…
CVE-2019-16022 - CVSS 8.6 (high), 2020-01-26: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an…
CVE-2019-16020 - CVSS 8.6 (high), 2020-01-26: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an…
CVE-2019-16027 - CVSS 7.7 (high), 2020-01-26: A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS…