Vulnerabilities fixed in Cisco IOS XR

🗓️ 14 Sep 2023 00:00:00Reported by NCSCType

Cisco IOS XR fixes include denial of service and ACL bypass risks, plus local access to install rogue firmware or run code; updates issued.

Reporter	Title	Published	Views	Family All 67
BDU FSTEC	The vulnerability of Cisco IOS XR operating system’s MPLS interfaces allows attackers to circumvent security restrictions.	19 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iPXE network loading standard implementation for the Cisco IOS XR operating system allows a hacker to load arbitrary files.	19 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ACL compression function in the Cisco IOS XR operating system allows a hacker to bypass security restrictions and gain access to privileged networks.	19 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Connectivity Fault Management (CFM) function in the Cisco IOS XR operating system allows a hacker to cause a service failure.	19 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the system check function of the Cisco IOS XR allows a hacker to execute arbitrary code.	26 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-20135	13 Sep 202320:23	–	circl
Circl	CVE-2023-20190	13 Sep 202320:23	–	circl
Circl	CVE-2023-20191	13 Sep 202320:23	–	circl
Circl	CVE-2023-20233	13 Sep 202320:24	–	circl
Circl	CVE-2023-20236	13 Sep 202320:23	–	circl

14 Sep 2023 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.16.7 - 7.8

EPSS0.00144

SSVC