CI
Product
Cisco IOS XR Software
On CISA KEVExploited in the wild
62
CVEs
4
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 35Medium 24Low 0
Watch
Add Cisco IOS XR Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20821 In wildKEV | 6.5 | May 26 | Cisco IOS XR Software Health Check Open Port Vulnerability Affected: All versions, or not specified |
| CVE-2026-20118 | 6.8 | Mar 11 | Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability Affected: 7.9.1; 7.10.1; 7.9.2; 7.11.1; 7.10.2; 24.1.1; +17 more |
| CVE-2021-1440 | 6.8 | Nov 18 | Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability Affected: 6.6.1; 6.5.3; 7.0.1; 6.6.11; 6.5.1; 6.5.2; +15 more |
| CVE-2025-20177 | 6.7 | Mar 12 | Cisco IOS XR Software Image Verification Bypass Vulnerability Affected: 7.0.1; 7.0.0; 7.1.1; 7.0.90; 6.7.1; 7.0.2; +34 more |
| CVE-2025-20143 | 6.7 | Mar 12 | Cisco IOS XR Software Secure Boot Bypass Vulnerability Affected: 6.5.3; 6.5.2; 6.5.92; 6.5.1; 6.5.15; 6.6.2; +34 more |
| CVE-2024-20456 | 6.7 | Jul 10 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and… Affected: 24.2.1 |
| CVE-2024-20262 | 6.5 | Mar 13 | A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.4; 5.2.3; 5.2.5; +34 more |
| CVE-2023-20233 | 6.5 | Sep 13 | A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.4; 5.2.3; 5.2.5; +34 more |
| CVE-2022-20849 | 6.1 | Nov 15 | Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability Affected: 6.5.3; 6.6.1; 6.5.15; 7.0.1; 6.6.25; 6.6.2; +27 more |
| CVE-2025-20248 | 6.0 | Sep 10 | Cisco IOS XR Software Image Verification Bypass Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2022-20845 | 6.0 | Nov 15 | Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability Affected: 6.5.29; 6.5.26; 6.5.25; 6.5.28; 6.5.31; 6.5.32 |
| CVE-2025-20145 | 5.8 | Mar 12 | Cisco IOS XR Software Access Control List Bypass Vulnerability Affected: 6.5.3; 6.5.2; 6.5.92; 6.5.1; 6.6.2; 7.0.1; +34 more |
| CVE-2025-20144 | 5.8 | Mar 12 | Cisco IOS XR Software Access Control List Bypass Vulnerability Affected: 6.5.3; 6.5.2; 6.5.92; 6.5.1; 6.6.2; 7.0.1; +34 more |
| CVE-2024-20315 | 5.8 | Mar 13 | A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to… Affected: 7.9.1; 7.9.2; 7.10.1 |
| CVE-2024-20322 | 5.8 | Mar 13 | A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote… Affected: 7.10.2; 7.11.1 |
| CVE-2024-20489 | 5.5 | Sep 11 | Cisco Routed Passive Optical Network Cleartext Password Vulnerability Affected: 24.1.1; 24.2.1; 24.1.2; 24.2.11; 24.3.1 |
| CVE-2024-20343 | 5.5 | Sep 11 | Cisco IOS XR Software CLI Arbitrary File Read Vulnerability Affected: 6.5.3; 6.6.1; 6.5.2; 6.5.92; 6.5.1; 6.5.15; +34 more |
| CVE-2025-20159 | 5.3 | Sep 10 | Cisco IOS XR Software Management Interface ACL Bypass Vulnerability Affected: 6.6.1; 6.5.3; 7.0.1; 6.6.11; 6.5.1; 6.5.2; +34 more |
| CVE-2024-20390 | 5.3 | Sep 11 | Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2024-20266 | 5.3 | Mar 13 | A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of the dhcpd process,… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.4; 5.2.3; 5.2.5; +34 more |
| CVE-2023-20190 | 5.3 | Sep 13 | A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass the protection that… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.4; 5.2.3; 5.2.5; +34 more |
| CVE-2023-20064 | 4.6 | Mar 9 | Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2022-20846 | 4.3 | Nov 15 | Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2024-20319 | 4.3 | Mar 13 | A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.4; 5.2.3; 5.2.5; +34 more |
Showing 24