CVE-2019-16021

CVE-2019-16021 concerns multiple DoS vulnerabilities in Cisco IOS XR EVPN/BGP processing. The root cause is incorrect handling of BGP update messages containing crafted EVPN attributes, which could let an unauthenticated, remote attacker restart the BGP process and cause a DoS. Exploitation would...

CVE-2019-16021 Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16023

CVE-2019-16023 — Cisco IOS XR BGP EVPN DoS : Multiple vulnerabilities in Cisco IOS XR’s BGP EVPN handling allow an unauthenticated remote attacker to cause a DoS by sending BGP EVPN update messages with malformed attributes. Exploitation requires来自 a configured, valid BGP peer or injection over a...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

CVE-2020-3473

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups withi...

CVE-2020-3530

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...

CVE-2020-3473

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups withi...

Command injection

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...

Authorization

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups withi...

CVE-2020-3473

CVE-2020-3473 describes a privilege-escalation vulnerability in Cisco IOS XR Software where an authenticated, local CLI shell user can elevate privileges due to an incorrect mapping of a CLI command to task groups. The attacker would authenticate to the local CLI shell and use the affected comman...

CVE-2020-3473 Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups withi...

CVE-2020-3473 Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups withi...

CVE-2020-3530 Cisco IOS XR Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...

CVE-2020-3530 Cisco IOS XR Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...

CVE-2020-3530

Cisco IOS XR Software contains CVE-2020-3530, a privilege-escalation flaw in task group assignment for a specific CLI command. An authenticated, local attacker with valid credentials can issue a command that should require Administrator privileges, due to an incorrect mapping in task group assign...

Cisco IOS XR Elevation of Privilege Vulnerability (CNVD-2020-51773)

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. An elevation of privilege vulnerability exists in Cisco IOS XR, which stems from an incorrect command-to-task group mapping in the code, and can be exploited by an attacker to elevate...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. The Cybersecurity and...

The vulnerability of the Distance Vector Multicast Routing Protocol (DVMRP) implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Distance Vector Multicast Routing Protocol DVMRP implementation in the Cisco IOS XR operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups withi...

Cisco IOS XR Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...