CVE-2025-20115
Estado: AnalizadaAlta (8.6)—
A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
This vulnerability is due to a memory corruption that occurs when a BGP update is created with an AS_CONFED_SEQUENCE attribute that has 255 autonomous system numbers (AS numbers). An attacker could exploit this vulnerability by sending a crafted BGP update message, or the network could be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more.
Leer descripción completaMostrar menos
A successful exploit could allow the attacker to cause memory corruption, which may cause the BGP process to restart, resulting in a DoS condition. To exploit this vulnerability, an attacker must control a BGP confederation speaker within the same autonomous system as the victim, or the network must be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Puntuación base: 8.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.89%
- Percentil entre todas las CVEs puntuadas: 58
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1190Exploit Public-Facing Applicationinitial access60 % - Impacto principal
T1499Endpoint Denial of Serviceimpact55 %
Inferido por reglas deterministas a partir del vector CVSS y la CWE. Solo orientativo.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (1)
CWE
- CWE-120
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-20115",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-20115",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-03-21T20:35:39.499211Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.6,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco IOS XR Software",
"versions": [
{
"status": "affected",
"version": "6.5.3"
},
{
"status": "affected",
"version": "6.5.29"
},
{
"status": "affected",
"version": "6.5.1"
},
{
"status": "affected",
"version": "6.6.1"
},
{
"status": "affected",
"version": "6.5.2"
},
{
"status": "affected",
"version": "6.5.92"
},
{
"status": "affected",
"version": "6.5.15"
},
{
"status": "affected",
"version": "6.6.2"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "6.6.25"
},
{
"status": "affected",
"version": "6.5.26"
},
{
"status": "affected",
"version": "6.6.11"
},
{
"status": "affected",
"version": "6.5.25"
},
{
"status": "affected",
"version": "6.5.28"
},
{
"status": "affected",
"version": "6.5.93"
},
{
"status": "affected",
"version": "6.6.12"
},
{
"status": "affected",
"version": "6.5.90"
},
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.1.1"
},
{
"status": "affected",
"version": "7.0.90"
},
{
"status": "affected",
"version": "6.6.3"
},
{
"status": "affected",
"version": "6.7.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.1.15"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.1.2"
},
{
"status": "affected",
"version": "6.7.2"
},
{
"status": "affected",
"version": "7.0.11"
},
{
"status": "affected",
"version": "7.0.12"
},
{
"status": "affected",
"version": "7.0.14"
},
{
"status": "affected",
"version": "7.1.25"
},
{
"status": "affected",
"version": "6.6.4"
},
{
"status": "affected",
"version": "7.2.12"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.1.3"
},
{
"status": "affected",
"version": "6.7.3"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "6.7.4"
},
{
"status": "affected",
"version": "6.5.31"
},
{
"status": "affected",
"version": "7.3.15"
},
{
"status": "affected",
"version": "7.3.16"
},
{
"status": "affected",
"version": "6.8.1"
},
{
"status": "affected",
"version": "7.4.15"
},
{
"status": "affected",
"version": "6.5.32"
},
{
"status": "affected",
"version": "7.3.2"
},
{
"status": "affected",
"version": "7.5.1"
},
{
"status": "affected",
"version": "7.4.16"
},
{
"status": "affected",
"version": "7.3.27"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.5.2"
},
{
"status": "affected",
"version": "7.8.1"
},
{
"status": "affected",
"version": "7.6.15"
},
{
"status": "affected",
"version": "7.5.12"
},
{
"status": "affected",
"version": "7.8.12"
},
{
"status": "affected",
"version": "7.3.3"
},
{
"status": "affected",
"version": "7.7.1"
},
{
"status": "affected",
"version": "6.8.2"
},
{
"status": "affected",
"version": "7.3.4"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "6.7.35"
},
{
"status": "affected",
"version": "6.9.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.7.2"
},
{
"status": "affected",
"version": "6.9.2"
},
{
"status": "affected",
"version": "7.9.1"
},
{
"status": "affected",
"version": "7.10.1"
},
{
"status": "affected",
"version": "7.8.2"
},
{
"status": "affected",
"version": "7.5.4"
},
{
"status": "affected",
"version": "6.5.33"
},
{
"status": "affected",
"version": "7.8.22"
},
{
"status": "affected",
"version": "7.7.21"
},
{
"status": "affected",
"version": "7.9.2"
},
{
"status": "affected",
"version": "7.3.5"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "7.11.1"
},
{
"status": "affected",
"version": "7.9.21"
},
{
"status": "affected",
"version": "7.10.2"
},
{
"status": "affected",
"version": "24.1.1"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.3.6"
},
{
"status": "affected",
"version": "7.5.52"
},
{
"status": "affected",
"version": "7.11.2"
},
{
"status": "affected",
"version": "24.2.1"
},
{
"status": "affected",
"version": "24.1.2"
},
{
"status": "affected",
"version": "24.2.11"
},
{
"status": "affected",
"version": "24.2.2"
},
{
"status": "affected",
"version": "7.8.23"
},
{
"status": "affected",
"version": "7.11.21"
},
{
"status": "affected",
"version": "24.2.20"
},
{
"status": "affected",
"version": "6.5.35"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2025-03-12T16:15:21.090",
"references": [
{
"url": "https://blog.apnic.net/2024/09/02/crafting-endless-as-paths-in-bgp/",
"tags": [
"Third Party Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-bgp-dos-O7stePhX",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to a memory corruption that occurs when a BGP update is created with an AS_CONFED_SEQUENCE attribute that has 255 autonomous system numbers (AS numbers). An attacker could exploit this vulnerability by sending a crafted BGP update message, or the network could be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more. A successful exploit could allow the attacker to cause memory corruption, which may cause the BGP process to restart, resulting in a DoS condition. To exploit this vulnerability, an attacker must control a BGP confederation speaker within the same autonomous system as the victim, or the network must be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la implementación de la confederación del Protocolo de Puerta de Enlace Fronteriza (BGP) en el software Cisco IOS XR podría permitir que un atacante remoto no autenticado provoque una denegación de servicio (DoS). Esta vulnerabilidad se debe a una corrupción de memoria que ocurre al crear una actualización de BGP con un atributo AS_CONFED_SEQUENCE que contiene 255 números de sistema autónomo (AS). Un atacante podría explotar esta vulnerabilidad enviando un mensaje de actualización de BGP manipulado, o la red podría estar diseñada para que el atributo AS_CONFED_SEQUENCE alcance 255 números de AS o más. Una explotación exitosa podría permitir al atacante causar corrupción de memoria, lo que podría provocar el reinicio del proceso BGP y provocar una denegación de servicio (DoS). Para explotar esta vulnerabilidad, un atacante debe controlar un interlocutor de la confederación BGP dentro del mismo sistema autónomo que la víctima, o la red debe estar diseñada para que el atributo AS_CONFED_SEQUENCE alcance 255 números de AS o más."
}
],
"lastModified": "2026-06-17T08:40:42.077",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2FD2C84-CD64-4C1C-BC38-2F7A2A6EEF45"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DE98B34-501B-449A-843A-58F297EDBE1B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86E05C3F-4095-4B9C-8C11-E32567EB14AC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "582B1A3D-68F5-4047-98B2-FEC2A9569828"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDAABB7C-DD62-418F-9CD3-B868913453AF"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DECAACAE-0DFF-43CE-83AF-84FEABAB2CAF"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B9EE8F5-2F17-45E8-91BD-9DB5EE97B0CD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3C1199B-57C2-4076-A612-5F75AE46B3D1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CB20C4D-F8AD-4887-8B73-07495439BA3D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE3676F8-475D-4C5D-A932-633E55A1C115"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13E2915D-36F8-4AFE-A2E0-59A8DF87A101"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79FABFF0-0D27-4954-8BA9-42187F7D9B66"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F6FF116-1FFB-4960-942E-A1A16ACEA7F0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.92:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CFC77F8-4131-42E1-93A4-13149BDCDC1D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.93:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "676F3DD0-6081-4C37-8E4F-210BC59C3C09"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54EA6C52-E541-4426-A3DF-2FA88CA28BA1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8AE8971-5003-4A39-8173-E17CE9C2523F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36944A2B-E4F5-41DE-AC4D-55BFA603BE5E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E6EA55E-05BA-483F-AAE1-DD573D22D6A9"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC51CBC1-3303-43EF-B617-AD0C59E36000"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C710E576-B368-41C9-88A8-75D88E00F4B4"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DC7F758-5AB7-4A45-A889-BE9DD8D0474E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB06AB15-7F91-4B17-BBBD-AC4E4D1EBF9E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1D7FA61-7D81-4FF3-827C-A97D35AB541B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "870B498C-3358-4EC0-B75A-B9A5D1DD40DC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95BB2A02-11B4-48C1-97D7-25A9DF28ABB2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5CEC350-6245-453D-BB6D-79D444E1A5FA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "004286E0-375F-4385-87EB-0C74BD9CAF6F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B255442-4F12-41A1-8050-B805AAE65947"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89FBA2B4-490F-4A00-8967-063F91F197E7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93125F1D-0CE5-423F-A73E-46F2A91E5FC2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00D33162-F298-4B99-A3D4-283A2A4FA091"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82AF763B-9299-4EDC-B42D-B83736839CA1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F70AB37-3C0B-40A8-BC37-5A79DA5F45F6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "921B3622-76A3-4D9F-936C-25A965CE1A0E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56092600-ABD2-4703-BA00-9DD0AE09B46D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B7EEF2-9B6A-43FC-8DBE-F82B8E01BCAE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E5C0909-27D8-4B6E-A644-9B8ADFA24266"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E90BEFD1-AAA5-4D39-A180-4B5ED3427AFC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B842317-A5DB-4890-948A-DD26B7AE2540"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00EA89C8-AAE8-48F1-91E4-7AE46083A802"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48928FFF-871C-4C07-8352-8C802FAD8F53"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06FDB11D-C54D-4654-8142-B50D306A6A28"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84BABFE7-1350-4FB0-B9ED-5F08E386BC40"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7FE3667-1B5E-48FB-B3BB-1C1854FFEE72"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B0370A9-E422-4109-81A3-DE2118A20827"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E20F814-87D4-41A5-B0A0-30AC6C6F2BB8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82CD7F68-9569-43F4-88ED-96F9A15C065D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2C4C062-F816-41FE-ADAD-F994F4FA4A07"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A07E9C56-D143-45FA-99FF-30F54A828BF6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F406EAA7-0607-419F-97E3-7ACEC8A3FA5B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB9D0641-28F8-4CCB-AEC3-205409D1704A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ECA7B4C-8FDD-4053-B37B-E5E0969C0CB4"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D21DEFD5-EC43-496B-BBE1-C71C6055BC04"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83150BDE-63B7-4B36-8584-E2E950E878CE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8511927B-4297-47BA-BC02-6250BC40DF2B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40C6D7C4-A5D9-4365-9664-EF35586925AA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC41A004-2029-4E22-A88F-2B93D9786B6C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E19F529-B25B-4B4B-879B-872D45C7C3B1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D501F5A6-4E23-4A9F-A550-37BB94691687"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57F7D7FD-24A8-4DD4-8280-A18244059F34"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A7448D1-BC19-45AB-BF6F-3434F8CA2CC8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A057808-1BCA-4C7C-A2D9-0BD5B09D20F6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7D09FC0-73C5-4F7A-8013-0B0E5CC834FB"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFA4A8AF-348D-4F90-B1CB-AE784E0A6EBE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23A66FF7-9BAB-40DA-8B90-C3C271D7E893"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88776859-57A0-4422-8D23-A09D64E72F63"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C95648D-A37A-446B-B106-12612C00A34D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DF31489-C029-4D4C-8401-26873FC469E3"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F79CAFA-73B0-4589-9938-B7898071279C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43AA14EF-3240-442E-935A-DF455FB107D7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1807BE16-BAA9-4BC6-B98A-13D584A12821"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "375746CB-695E-4019-89C9-42ED37A5E958"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE7D05C0-4065-448B-AAC6-F29E379F3DA6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8ADA2B1-FD5A-4900-953B-30951C8EF9AE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B4C7223-3EFB-48C2-BE22-941F60826D0C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A14959D-63E1-4B5A-BB7F-A9A2AF3F1137"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EE83701-C0B7-4ED2-866B-44B7F54FCA0F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C8B2427-D8C6-420B-A71F-7FD7274DF0A1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "164B241C-397A-4921-BC5B-F928A21E91C2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAD3875D-D283-4961-BE31-750FDF9CDF56"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87EF9DC5-4BE2-429D-B9BA-EF9F29E7E0F7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAEC28C0-8091-49F9-88D1-CB96234BF52A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1ED2B72-A65C-47E4-87B3-D83F29428396"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8904CAA5-4E01-462C-AE57-067902CD95FC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7750EA99-EC55-4F94-8730-18583647BBBA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFEA7A0B-E20F-4ECC-A789-A4282EAC3029"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCE8E968-111F-4F57-93D3-E509AB540B87"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B342A550-8600-45CF-8B9A-530770C9A0F4"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D64E1C4D-46B0-4A18-B8EE-BEA732CBF1F8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52002032-AB4E-4F3C-B832-EAA83F9EF97D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11288A28-F0CF-4FEC-A0B7-3D93866F01FE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35D1FF2C-A40C-44EB-AAB1-A70B94E3D717"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}