Cisco IOS XR
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0286 | Cisco IOS XR | A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of servi | MEDIUM 5.3 | 3.2 % | ||
| CVE-2018-0241 | Cisco IOS XR | A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause | HIGH 7.4 | 0.8 % | ||
| CVE-2018-0132 | Cisco IOS XR | A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to ca | HIGH 8.6 | 2.3 % | ||
| CVE-2017-12355 | Cisco IOS XR | A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an | MEDIUM 5.3 | 3.1 % | ||
| CVE-2017-12270 | Cisco IOS XR | A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unau | HIGH 7.5 | 2.3 % | ||
| CVE-2017-6731 | Cisco IOS XR | A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthentic | HIGH 7.5 | 1.6 % | ||
| CVE-2017-6728 | Cisco IOS XR | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privi | HIGH 7.0 | 0.3 % | ||
| CVE-2017-6719 | Cisco IOS XR | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host o | MEDIUM 6.7 | 0.7 % | ||
| CVE-2017-6718 | Cisco IOS XR | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. Mo | MEDIUM 6.7 | 0.4 % | ||
| CVE-2017-3876 | Cisco IOS XR | A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cau | HIGH 7.5 | 2.5 % | ||
| CVE-2016-9215 | Cisco IOS XR | A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the roo | HIGH 7.8 | 0.4 % | ||
| CVE-2016-9205 | Cisco IOS XR | A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the | HIGH 7.5 | 1.6 % |