CVE-2025-20154
Estado: AnalizadaAlta (8.6)—
A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. For Cisco IOS XR Software, this vulnerability could cause the ipsla_ippm_server process to reload unexpectedly if debugs are enabled.
This vulnerability is due to out-of-bounds array access when processing specially crafted TWAMP control packets.
Leer descripción completaMostrar menos
An attacker could exploit this vulnerability by sending crafted TWAMP control packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: For Cisco IOS XR Software, only the ipsla_ippm_server process reloads unexpectedly and only when debugs are enabled. The vulnerability details for Cisco IOS XR Software are as follows: Security Impact Rating (SIR): Low CVSS Base Score: 3.7 CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Puntuación base: 8.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.54%
- Percentil entre todas las CVEs puntuadas: 43
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1190Exploit Public-Facing Applicationinitial access95 % - Impacto principal
T1499.004Application or System Exploitationimpact90 %
Vulnerabilidad remota sin autenticación ni interacción (AV:N, PR:N, UI:N) en TWAMP server de Cisco. Explotación de aplicación expuesta (T1190). Impact: DoS por recarga del dispositivo mediante paquetes TWAMP malformados (T1499.004 - Application Exhaustion).
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (3)
CWE
- CWE-20
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-20154",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-20154",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-05-07T18:56:59.795728Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.6,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco IOS XR Software",
"versions": [
{
"status": "affected",
"version": "6.5.3"
},
{
"status": "affected",
"version": "6.5.29"
},
{
"status": "affected",
"version": "6.5.1"
},
{
"status": "affected",
"version": "6.6.1"
},
{
"status": "affected",
"version": "6.5.2"
},
{
"status": "affected",
"version": "6.5.92"
},
{
"status": "affected",
"version": "6.5.15"
},
{
"status": "affected",
"version": "6.6.2"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "6.6.25"
},
{
"status": "affected",
"version": "6.5.26"
},
{
"status": "affected",
"version": "6.6.11"
},
{
"status": "affected",
"version": "6.5.25"
},
{
"status": "affected",
"version": "6.5.28"
},
{
"status": "affected",
"version": "6.5.93"
},
{
"status": "affected",
"version": "6.6.12"
},
{
"status": "affected",
"version": "6.5.90"
},
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.1.1"
},
{
"status": "affected",
"version": "7.0.90"
},
{
"status": "affected",
"version": "6.6.3"
},
{
"status": "affected",
"version": "6.7.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.1.15"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.1.2"
},
{
"status": "affected",
"version": "6.7.2"
},
{
"status": "affected",
"version": "7.0.11"
},
{
"status": "affected",
"version": "7.0.12"
},
{
"status": "affected",
"version": "7.0.14"
},
{
"status": "affected",
"version": "7.1.25"
},
{
"status": "affected",
"version": "6.6.4"
},
{
"status": "affected",
"version": "7.2.12"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.1.3"
},
{
"status": "affected",
"version": "6.7.3"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "6.7.4"
},
{
"status": "affected",
"version": "6.5.31"
},
{
"status": "affected",
"version": "7.3.15"
},
{
"status": "affected",
"version": "7.3.16"
},
{
"status": "affected",
"version": "6.8.1"
},
{
"status": "affected",
"version": "7.4.15"
},
{
"status": "affected",
"version": "6.5.32"
},
{
"status": "affected",
"version": "7.3.2"
},
{
"status": "affected",
"version": "7.5.1"
},
{
"status": "affected",
"version": "7.4.16"
},
{
"status": "affected",
"version": "7.3.27"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.5.2"
},
{
"status": "affected",
"version": "7.8.1"
},
{
"status": "affected",
"version": "7.6.15"
},
{
"status": "affected",
"version": "7.5.12"
},
{
"status": "affected",
"version": "7.3.3"
},
{
"status": "affected",
"version": "7.7.1"
},
{
"status": "affected",
"version": "6.8.2"
},
{
"status": "affected",
"version": "7.3.4"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "6.7.35"
},
{
"status": "affected",
"version": "6.9.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.7.2"
},
{
"status": "affected",
"version": "6.9.2"
},
{
"status": "affected",
"version": "7.9.1"
},
{
"status": "affected",
"version": "7.10.1"
},
{
"status": "affected",
"version": "7.8.2"
},
{
"status": "affected",
"version": "7.5.4"
},
{
"status": "affected",
"version": "6.5.33"
},
{
"status": "affected",
"version": "7.8.22"
},
{
"status": "affected",
"version": "7.7.21"
},
{
"status": "affected",
"version": "7.9.2"
},
{
"status": "affected",
"version": "7.3.5"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "7.11.1"
},
{
"status": "affected",
"version": "7.9.21"
},
{
"status": "affected",
"version": "7.10.2"
},
{
"status": "affected",
"version": "24.1.1"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.3.6"
},
{
"status": "affected",
"version": "7.11.2"
},
{
"status": "affected",
"version": "24.2.1"
},
{
"status": "affected",
"version": "24.1.2"
},
{
"status": "affected",
"version": "24.2.11"
},
{
"status": "affected",
"version": "24.3.1"
},
{
"status": "affected",
"version": "24.2.2"
},
{
"status": "affected",
"version": "7.8.23"
},
{
"status": "affected",
"version": "7.11.21"
},
{
"status": "affected",
"version": "24.2.20"
},
{
"status": "affected",
"version": "6.5.35"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2025-05-07T18:15:37.177",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. For Cisco IOS XR Software, this vulnerability could cause the ipsla_ippm_server process to reload unexpectedly if debugs are enabled.\r\n\r\nThis vulnerability is due to out-of-bounds array access when processing specially crafted TWAMP control packets. An attacker could exploit this vulnerability by sending crafted TWAMP control packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.\r\nNote: For Cisco IOS XR Software, only the ipsla_ippm_server process reloads unexpectedly and only when debugs are enabled. The vulnerability details for Cisco IOS XR Software are as follows: Security Impact Rating (SIR): Low CVSS Base Score: 3.7 CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
{
"lang": "es",
"value": "Una vulnerabilidad en la función de servidor del Protocolo de Medición Activa Bidireccional (TWAMP) del software Cisco IOS y Cisco IOS XE podría permitir que un atacante remoto no autenticado recargue el dispositivo afectado, lo que resulta en una denegación de servicio (DoS). En el software Cisco IOS XR, esta vulnerabilidad podría provocar que el proceso ipsla_ippm_server se recargue inesperadamente si se habilitan las depuraciones. Esta vulnerabilidad se debe a un acceso fuera de los límites a la matriz al procesar paquetes de control TWAMP especialmente manipulados. Un atacante podría explotar esta vulnerabilidad enviando paquetes de control TWAMP diseñados a un dispositivo afectado. Una explotación exitosa podría permitir que el atacante recargue el dispositivo afectado, lo que resulta en una denegación de servicio (DoS). Nota: En el software Cisco IOS XR, solo el proceso ipsla_ippm_server se recarga inesperadamente y solo cuando se habilitan las depuraciones. Los detalles de la vulnerabilidad del software Cisco IOS XR son los siguientes: Clasificación de impacto de seguridad (SIR): baja. Puntuación base CVSS: 3,7. Vector CVSS: CVSS: 3.1/AV: N/AC: H/PR: N/UI: N/S: U/C: N/I: N/A: L."
}
],
"lastModified": "2026-06-17T08:40:48.357",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "456B8012-3BCD-4963-9105-8AFF73E1F8A7",
"versionEndIncluding": "15.9\\(3\\)m11"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B88094D9-E2A9-4F48-BF8F-1A63E3F69CA2",
"versionEndIncluding": "17.2.3",
"versionStartIncluding": "16.6.1"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2FD2C84-CD64-4C1C-BC38-2F7A2A6EEF45"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DE98B34-501B-449A-843A-58F297EDBE1B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86E05C3F-4095-4B9C-8C11-E32567EB14AC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "582B1A3D-68F5-4047-98B2-FEC2A9569828"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDAABB7C-DD62-418F-9CD3-B868913453AF"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DECAACAE-0DFF-43CE-83AF-84FEABAB2CAF"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B9EE8F5-2F17-45E8-91BD-9DB5EE97B0CD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3C1199B-57C2-4076-A612-5F75AE46B3D1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CB20C4D-F8AD-4887-8B73-07495439BA3D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE3676F8-475D-4C5D-A932-633E55A1C115"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13E2915D-36F8-4AFE-A2E0-59A8DF87A101"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79FABFF0-0D27-4954-8BA9-42187F7D9B66"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F6FF116-1FFB-4960-942E-A1A16ACEA7F0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.92:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CFC77F8-4131-42E1-93A4-13149BDCDC1D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.93:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "676F3DD0-6081-4C37-8E4F-210BC59C3C09"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54EA6C52-E541-4426-A3DF-2FA88CA28BA1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8AE8971-5003-4A39-8173-E17CE9C2523F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36944A2B-E4F5-41DE-AC4D-55BFA603BE5E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E6EA55E-05BA-483F-AAE1-DD573D22D6A9"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC51CBC1-3303-43EF-B617-AD0C59E36000"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C710E576-B368-41C9-88A8-75D88E00F4B4"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.6.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DC7F758-5AB7-4A45-A889-BE9DD8D0474E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB06AB15-7F91-4B17-BBBD-AC4E4D1EBF9E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1D7FA61-7D81-4FF3-827C-A97D35AB541B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "870B498C-3358-4EC0-B75A-B9A5D1DD40DC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95BB2A02-11B4-48C1-97D7-25A9DF28ABB2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5CEC350-6245-453D-BB6D-79D444E1A5FA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "004286E0-375F-4385-87EB-0C74BD9CAF6F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B255442-4F12-41A1-8050-B805AAE65947"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89FBA2B4-490F-4A00-8967-063F91F197E7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:6.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93125F1D-0CE5-423F-A73E-46F2A91E5FC2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00D33162-F298-4B99-A3D4-283A2A4FA091"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82AF763B-9299-4EDC-B42D-B83736839CA1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F70AB37-3C0B-40A8-BC37-5A79DA5F45F6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "921B3622-76A3-4D9F-936C-25A965CE1A0E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56092600-ABD2-4703-BA00-9DD0AE09B46D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B7EEF2-9B6A-43FC-8DBE-F82B8E01BCAE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E5C0909-27D8-4B6E-A644-9B8ADFA24266"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E90BEFD1-AAA5-4D39-A180-4B5ED3427AFC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B842317-A5DB-4890-948A-DD26B7AE2540"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00EA89C8-AAE8-48F1-91E4-7AE46083A802"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48928FFF-871C-4C07-8352-8C802FAD8F53"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06FDB11D-C54D-4654-8142-B50D306A6A28"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84BABFE7-1350-4FB0-B9ED-5F08E386BC40"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7FE3667-1B5E-48FB-B3BB-1C1854FFEE72"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B0370A9-E422-4109-81A3-DE2118A20827"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E20F814-87D4-41A5-B0A0-30AC6C6F2BB8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82CD7F68-9569-43F4-88ED-96F9A15C065D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2C4C062-F816-41FE-ADAD-F994F4FA4A07"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A07E9C56-D143-45FA-99FF-30F54A828BF6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F406EAA7-0607-419F-97E3-7ACEC8A3FA5B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB9D0641-28F8-4CCB-AEC3-205409D1704A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ECA7B4C-8FDD-4053-B37B-E5E0969C0CB4"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D21DEFD5-EC43-496B-BBE1-C71C6055BC04"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83150BDE-63B7-4B36-8584-E2E950E878CE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8511927B-4297-47BA-BC02-6250BC40DF2B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40C6D7C4-A5D9-4365-9664-EF35586925AA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC41A004-2029-4E22-A88F-2B93D9786B6C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E19F529-B25B-4B4B-879B-872D45C7C3B1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D501F5A6-4E23-4A9F-A550-37BB94691687"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57F7D7FD-24A8-4DD4-8280-A18244059F34"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A7448D1-BC19-45AB-BF6F-3434F8CA2CC8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A057808-1BCA-4C7C-A2D9-0BD5B09D20F6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7D09FC0-73C5-4F7A-8013-0B0E5CC834FB"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFA4A8AF-348D-4F90-B1CB-AE784E0A6EBE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23A66FF7-9BAB-40DA-8B90-C3C271D7E893"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C95648D-A37A-446B-B106-12612C00A34D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DF31489-C029-4D4C-8401-26873FC469E3"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F79CAFA-73B0-4589-9938-B7898071279C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43AA14EF-3240-442E-935A-DF455FB107D7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1807BE16-BAA9-4BC6-B98A-13D584A12821"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "375746CB-695E-4019-89C9-42ED37A5E958"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE7D05C0-4065-448B-AAC6-F29E379F3DA6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8ADA2B1-FD5A-4900-953B-30951C8EF9AE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B4C7223-3EFB-48C2-BE22-941F60826D0C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EE83701-C0B7-4ED2-866B-44B7F54FCA0F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C8B2427-D8C6-420B-A71F-7FD7274DF0A1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "164B241C-397A-4921-BC5B-F928A21E91C2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAD3875D-D283-4961-BE31-750FDF9CDF56"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87EF9DC5-4BE2-429D-B9BA-EF9F29E7E0F7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAEC28C0-8091-49F9-88D1-CB96234BF52A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1ED2B72-A65C-47E4-87B3-D83F29428396"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8904CAA5-4E01-462C-AE57-067902CD95FC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7750EA99-EC55-4F94-8730-18583647BBBA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFEA7A0B-E20F-4ECC-A789-A4282EAC3029"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCE8E968-111F-4F57-93D3-E509AB540B87"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B342A550-8600-45CF-8B9A-530770C9A0F4"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D64E1C4D-46B0-4A18-B8EE-BEA732CBF1F8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52002032-AB4E-4F3C-B832-EAA83F9EF97D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11288A28-F0CF-4FEC-A0B7-3D93866F01FE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35D1FF2C-A40C-44EB-AAB1-A70B94E3D717"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:24.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FD120B9-0671-473C-8420-872E5BB9933F"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}