Cisco
Cisco IOS XR: vulnerabilidades y CVE
Cisco IOS XR tiene 212 vulnerabilidades publicadas, 11 de ellas en los últimos 12 meses. 5 son críticas y 10 figuran en el catálogo de explotación activa de CISA.
CVE212
Últimos 12 meses11
Críticas5
Explotadas activamente10
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-44487 | Alta (7.5) | 100% | ⚠ Explotación activa | 10 oct 2023 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2016-6415 | Alta (7.5) | 88% | ⚠ Explotación activa | 19 sept 2016 | The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive… |
| CVE-2022-20821 | Media (6.5) | 11% | ⚠ Explotación activa | 26 may 2022 | A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because… |
| CVE-2009-2055 | Media (5.9) | 3.3% | ⚠ Explotación activa | 19 ago 2009 | Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009. |
| CVE-2010-3035 | Alta (7.5) | 5.7% | ⚠ Explotación activa | 30 ago 2010 | Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix… |
| CVE-2018-0175 | Alta (8) | 3.5% | ⚠ Explotación activa | 28 mar 2018 | Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a… |
| CVE-2018-0167 | Alta (8.8) | 3.4% | ⚠ Explotación activa | 28 mar 2018 | Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to… |
| CVE-2020-3118 | Alta (8.8) | 12% | ⚠ Explotación activa | 5 feb 2020 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The… |
| CVE-2020-3566 | Alta (8.6) | 3.7% | ⚠ Explotación activa | 29 ago 2020 | A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The… |
| CVE-2020-3569 | Alta (8.6) | 3.3% | ⚠ Explotación activa | 23 sept 2020 | Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20280 | Alta (8.8) | 0.29% | — | 2 sept 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software… |
| CVE-2026-20279 | Crítica (9.8) | 0.30% | — | 2 sept 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software… |
| CVE-2026-20278 | Alta (8.8) | 0.30% | — | 2 sept 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software… |
| CVE-2026-20277 | Alta (8.2) | 0.23% | — | 2 sept 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software… |
| CVE-2026-20276 | Alta (8.6) | 0.27% | — | 2 sept 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software… |
| CVE-2026-20275 | Alta (8.8) | 0.20% | — | 2 sept 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software… |
| CVE-2026-20274 | Crítica (9.8) | 0.73% | — | 2 sept 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software… |
| CVE-2026-20118 | Media (6.8) | 0.32% | — | 11 mar 2026 | A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series with NC57 line cards and Cisco NCS 5700… |
| CVE-2026-20074 | Alta (7.4) | 0.16% | — | 11 mar 2026 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart… |
| CVE-2026-20046 | Alta (8.8) | 0.14% | — | 11 mar 2026 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device.… |
| CVE-2026-20040 | Alta (8.8) | 0.17% | — | 11 mar 2026 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due… |
| CVE-2025-20363 | Crítica (9) | 6.9% | — | 25 sept 2025 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR… |
| CVE-2025-20340 | Alta (7.4) | 0.61% | — | 10 sept 2025 | This vulnerability is due to how Cisco IOS XR Software processes a high, sustained rate of ARP traffic hitting the management interface. Under certain conditions, an attacker could exploit this vulnerability by sending… |
| CVE-2025-20248 | Media (6) | 0.10% | — | 10 sept 2025 | A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR Software image signature verification and load unsigned software on an affected… |
| CVE-2025-20159 | Media (5.3) | 0.32% | — | 10 sept 2025 | A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass configured ACLs for the SSH, NetConf, and gRPC… |
| CVE-2025-20154 | Alta (8.6) | 0.51% | — | 7 may 2025 | A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload,… |
| CVE-2025-20209 | Alta (7.5) | 0.54% | — | 12 mar 2025 | This vulnerability is due to improper handling of malformed IKEv2 packets. An attacker could exploit this vulnerability by sending malformed IKEv2 packets to an affected device. A successful exploit could allow the… |
| CVE-2025-20177 | Media (6.7) | 0.17% | — | 12 mar 2025 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified software on an affected device. To… |
| CVE-2025-20146 | Alta (8.6) | 0.53% | — | 12 mar 2025 | A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers… |
| CVE-2025-20145 | Media (5.8) | 0.40% | — | 12 mar 2025 | A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because… |
| CVE-2025-20144 | Media (5.8) | 0.34% | — | 12 mar 2025 | A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to… |
| CVE-2025-20143 | Media (6.7) | 0.11% | — | 12 mar 2025 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device.… |
| CVE-2025-20142 | Alta (8.6) | 0.54% | — | 12 mar 2025 | A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS) policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact… |
| CVE-2025-20141 | Alta (7.4) | 0.24% | — | 12 mar 2025 | This vulnerability is due to incorrect handling of packets that are punted to the route processor. An attacker could exploit this vulnerability by sending traffic, which must be handled by the Linux stack on the route… |
| CVE-2025-20138 | Alta (8.8) | 0.23% | — | 12 mar 2025 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due… |
| CVE-2025-20115 | Alta (8.6) | 0.88% | — | 12 mar 2025 | A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This… |
| CVE-2025-20172 | Alta (7.7) | 0.76% | — | 5 feb 2025 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. |
| CVE-2021-1440 | Media (6.8) | 0.80% | — | 18 nov 2024 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP)… |
| CVE-2022-20849 | Media (6.1) | 0.28% | — | 15 nov 2024 | A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This… |
| CVE-2022-20846 | Media (4.3) | 1.00% | — | 15 nov 2024 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the Cisco Discovery Protocol process to reload on an… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
📰 Noticias relacionadas
Otros productos de Cisco
IOS · 625IOS XE · 581Adaptive Security Appliance Software · 354Secure Firewall Threat Defense · 299Nx-os · 286Unified Communications Manager · 241Identity Services Engine · 206Secure Firewall Management Center · 191Webex Meetings Server · 136Rv110w Firmware · 132Rv130w Firmware · 131Unified Computing System · 116