CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2022-20821

Cisco IOS XR Software health check RPM opens port 6379 by default, exposing the Redis instance inside the NOSi container to unauthenticated remote access. This could allow writing to the Redis in-memory DB, writing arbitrary files to the container filesystem, and retrieving Redis data. The vulner...

CVE-2020-3566

CVE-2020-3566 affects Cisco IOS XR Software, exploiting the DVMRP feature via crafted IGMP traffic to exhaust device memory and disrupt processes. Root cause is insufficient IGMP queue management within DVMRP, potentially impacting interior/exterior routing protocols and causing instability. Mult...

CVE-2018-0167

CVE-2018-0167 involves multiple buffer overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, IOS XE Software, and IOS XR Software. The description documents that an unauthenticated, adjacent attacker could trigger a denial of service or escalate pri...

CVE-2018-0175

CVE-2018-0175 is a vulnerability in the LLDP subsystem of Cisco IOS Software, IOS XE Software, and IOS XR Software. The issue stems from a Format String vulnerability in LLDP that could allow an unauthenticated, adjacent attacker to cause a denial of service or to execute arbitrary code with elev...

CVE-2020-3569

CVE-2020-3569 affects Cisco IOS XR Software DVMRP. The vulnerability stems from incorrect handling of IGMP packets, allowing an unauthenticated remote attacker to either immediately crash the IGMP process or exhaust memory, potentially destabilizing other processes (e.g., routing protocols). Expl...

CVE-2010-3035

CVE-2010-3035 affects Cisco IOS XR 3.4.0–3.9.1 with BGP enabled. A crafted BGP prefix using an unrecognized transitive attribute (notably attribute code 99) can cause a DoS by resetting the BGP peering session. In the wild demonstrations occurred in August 2010. Affected platforms: Cisco IOS XR. ...

CVE-2009-2055

Cisco IOS XR (Cisco IOS XR software) versions 3.4.0–3.8.1 are affected by a BGP UPDATE handling DoS vulnerability (CVE-2009-2055). The issue allows remote attackers to cause a denial of service by sending a BGP UPDATE with an invalid attribute, resulting in a session reset of the BGP peering. Dem...

CVE-2020-3118

CVE-2020-3118 is a Cisco CDP format-string vulnerability in Cisco IOS XR CDP handling. The issue arises from improper validation of string input in CDP messages, enabling an unauthenticated, adjacent attacker to potentially execute arbitrary code with administrative privileges or cause a reload v...

CVE-2016-6415

CVE-2016-6415 is an information-disclosure vulnerability in Cisco IOS, IOS XE, IOS XR (and PIX prior to 7.0) where the IKEv1 security-negotiation code lacks sufficient checks, enabling an unauthenticated remote attacker to read memory contents via an SA negotiation request. Affected products span...

CVE-2019-1909

CVE-2019-1909 concerns Cisco IOS XR Software where the BGP implementation may mishandle certain BGP update messages. An unauthenticated, remote attacker could trigger a denial of service by causing the BGP process to restart, leading to degraded or unavailable routing on the device. The flaw stem...

CVE-2025-20363

CVE-2025-20363 affects Cisco Secure Firewall ASA/FTD web services and several Cisco IOS families. The issue arises from improper validation of user-supplied input in HTTP requests, allowing an unauthenticated remote attacker (ASA/FTD) or an authenticated, low-privilege remote attacker (IOS/IOS XE...

CVE-2022-20714

CVE-2022-20714 affects Cisco IOS XR on ASR 9000 Series Lightspeed-Plus line cards (e.g., ASR 9902/9903). The issue is in the data plane microcode where malformed IPv4/IPv6 packets can trigger a line card reset, causing DoS for traffic traversing the card. Exploitation requires no authentication. ...

CVE-2026-20274

Cisco IOS XR Software is affected by multiple internally discovered improper resource control issues (CWE-664), identified through Cisco's September 2026 security hardening review. The vulnerabilities carry a CVSS 3.1 score of 9.8 (Critical) with a network attack vector, low complexity, no privil...

CVE-2019-16022

Cisco IOS XR Software contains DoS vulnerabilities in the BGP EVPN implementation. Malformed BGP EVPN update attributes can cause the BGP process to restart, yielding a DoS. Exploitation requires an unauthenticated remote attacker to send crafted EVPN attributes from a configured/valid BGP peer o...

CVE-2019-16018

Cisco IOS XR Software EVPN BGP operational routes vulnerability (CVE-2019-16018) allows unauthenticated remote DoS through crafted BGP EVPN update messages that trigger BGP process restart. Affected component: BGP EVPN handling in IOS XR; impact is DoS (availability) with no confidentiality/integ...

CVE-2019-1649

CVE-2019-1649 concerns Cisco’s Secure Boot Trust Anchor module (TAm). The flaw stems from an improper check in the FPGA/ Trust Anchor bitstream handling, enabling an authenticated, local attacker with OS access to write a modified firmware image to the FPGA. Consequences include potential device ...

CVE-2019-16020

CVE-2019-16020 relates to multiple DoS vulnerabilities in Cisco IOS XR’s BGP EVPN feature. The issues arise from incorrect processing of BGP update messages that carry crafted EVPN attributes, allowing an unauthenticated, remote attacker to cause the BGP process to restart and trigger a DoS condi...

CVE-2025-20138

Cisco IOS XR Software CLI Privilege Escalation (CVE-2025-20138) affects the CLI of Cisco IOS XR; an authenticated, low-privilege attacker can craft commands to bypass argument validation and gain root-level control on the device. The issue arises from insufficient validation of user arguments pas...

CVE-2020-3120

CVE-2020-3120 affects Cisco FXOS, IOS XR, and NX-OS CDP handling. A missing check when processing Cisco Discovery Protocol messages could let an unauthenticated, adjacent attacker cause a device reload and DoS by sending crafted CDP packets (Layer 2). Impact per sources is DoS via memory exhausti...

CVE-2024-20381

CVE-2024-20381 involves a JSON-RPC API authorization bypass in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD, used by web interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN routers. The root cause is improper authorization checks on the API, allowing an authenticate...

CVE-2019-16027

CVE-2019-16027 affects Cisco IOS XR Software IS-IS: an authenticated, remote attacker can cause a denial-of-service in the IS-IS process by sending a crafted SNMP request that abuses how the IS-IS code handles certain OIDs. The root cause is improper handling of SNMP requests for specific OIDs wi...

CVE-2016-1409

CVE-2016-1409 affects Cisco's IPv6 Neighbor Discovery (ND) implementation in Cisco IOS XE (2.1–3.17S), IOS XR (2.0.0–5.3.2), and NX-OS. The issue allows remote attackers to cause a denial of service (packet-processing outage) by sending crafted ND messages. The vulnerability is tied to ND process...

CVE-2024-20483

CVE-2024-20483 involves multiple vulnerabilities in Cisco Routed PON Controller Software (Docker container on Cisco IOS XR hardware) where insufficient validation of arguments to configuration commands can allow an authenticated, admin-level attacker on the PON Manager or direct access to its Mon...

CVE-2019-1910

Cisco IOS XR Software prior to Release 6.6.3 is vulnerable to an IS-IS Denial of Service through crafted IS-IS link-state PDUs. The issue stems from incorrect processing of these PDUs, allowing an unauthenticated attacker in the same IS-IS area to trigger a restart of the IS-IS process and a DoS ...

CVE-2019-15989

CVE-2019-15989 affects Cisco IOS XR Software where BGP update messages with a specific malformed attribute can crash the BGP process, causing DoS. Exploitation requires a message from an allowed peer or injection over an existing BGP TCP session. Cisco has released software updates to address thi...

CVE-2019-1918

Cisco IOS XR Software is affected by CVE-2019-1918 in the IS-IS implementation. An unauthenticated attacker in the same IS-IS area can send crafted IS-IS link-state PDUs to trigger DoS by causing incorrect calculations and potentially crashing the IS-IS process, per Cisco and NVD entries. The vul...

CVE-2025-20146

The CVE-2025-20146 entry describes a vulnerability in Cisco IOS XR Software for the ASR 9000 Series, including ASR 9902/9903 routers. The issue stems from incorrect handling of malformed IPv4 multicast packets on line cards where the interface has an IPv4 ACL or QoS policy. An unauthenticated, re...

CVE-2008-1159

Cisco IOS SSH server on 12.4-based releases contains multiple vulnerabilities (CVE-2008-1159) that allow unauthenticated remote attackers to trigger a spurious memory access error or, in some cases, reload the device, causing DoS. No exploit vectors are detailed in the provided documents; exploit...

CVE-2024-20304

CVE-2024-20304 affects Cisco IOS XR Software where the Mtrace2 feature mishandles packet memory, allowing an unauthenticated, remote attacker to exhaust incoming UDP packet memory and potentially cause DoS. Impact is network-based with availability loss; exploit can be performed over IPv4 or IPv6...

CVE-2023-20064

CVE-2023-20064 affects Cisco IOS XR Software. A vulnerability in the GRand Unified Bootloader (GRUB) allows a local, unauthenticated attacker with physical access to view sensitive files via the console during power-cycle, due to unnecessary commands in the GRUB environment. Exploitation requires...

CVE-2021-34718

Cisco IOS XR Software contains an Arbitrary File Read/Write vulnerability in the SSH Server, exploitable by an authenticated, remote attacker via crafted SCP parameters during login. The issue stems from insufficient input validation of user-supplied arguments for the SCP file-transfer method, en...

CVE-2024-20320

CVE-2024-20320 affects Cisco IOS XR Software on Cisco 8000 Series Routers and NCS 540/5700 Series; the issue is due to insufficient validation of arguments in the SSH client CLI command, allowing an authenticated, low-privileged attacker to escalate to root on the device. Cisco states software up...

CVE-2020-26070

CVE-2020-26070 affects Cisco IOS XR Software on Cisco ASR 9000 Series routers. The flaw is in the ingress packet processing function where improper resource allocation during software switching (punted) can be exploited by unauthenticated remote attackers via specific Layer 2/3 PDUs to exhaust bu...

CVE-2025-20115

Cisco IOS XR Software is affected by CVE-2025-20115 due to a memory corruption in the BGP confederation handling when AS_CONFED_SEQUENCE contains 255 AS numbers. An unauthenticated, remote attacker can trigger a DoS by sending crafted BGP updates or via network design that allows AS_CONFED_SEQUEN...

CVE-2024-20398

Cisco IOS XR Software CLI vulnerability allows an authenticated, local attacker with a low-privileged account to craft commands at the prompt to gain read/write access to the underlying filesystem and potentially elevate to root. Root cause: insufficient validation of user arguments for specific ...

CVE-2023-20049

CVE-2023-20049 affects Cisco IOS XR Software running on ASR 9000 Series routers (including ASR 9902/9903) where the BFD hardware offload is enabled. The root cause is incorrect handling of malformed IPv4 BFD packets received on line cards, which can cause line-card exceptions or a hard reset, lea...

CVE-2019-15998

Cisco IOS XR Software NETCONF over SSH ACL bypass (CVE-2019-15998) arises from a missing check in the NETCONF over SSH ACL. Affected versions include Cisco IOS XR 6.5.1 and 6.5.2. The vulnerability could allow an attacker with valid credentials to connect to the NETCONF port despite an ACL that d...

CVE-2025-20145

Cisco IOS XR Software contains an ACL processing issue in the egress direction that can allow an unauthenticated, remote attacker to bypass a configured egress ACL. The root cause involves certain packets being mishandled when received on an ingress interface on one line card and destined to an e...

CVE-2021-34771

CVE-2021-34771 affects Cisco IOS XR Software (CLI). The issue stems from insufficient restrictions during execution of a specific command, allowing an authenticated, local attacker to view sensitive configuration information beyond their privileges. Impact is information disclosure (confidentiali...

CVE-2021-1485

CVE-2021-1485 describes a local command-injection vulnerability in the CLI of Cisco IOS XR Software. An authenticated, local attacker can supply crafted input to affected CLI commands, exploiting insufficient input validation to execute arbitrary commands on the underlying Linux OS with root priv...

CVE-2019-1849

Cisco IOS XR Software CVE-2019-1849 affects the BGP/MPLS-EVPN implementation. The issue is a logic error triggered when processing EVPN routing information, allowing an unauthenticated adjacent attacker to inject malicious traffic and crash the l2vpn_mgr process on PE devices within the same EVPN...

CVE-2023-20190

Cisco IOS XR Software contains a vulnerability in the ACL compression feature (CVE-2023-20190) that can allow an unauthenticated, remote attacker to bypass ACL protections on an interface by exploiting incorrect destination address range encoding in the compression module. This could enable acces...

CVE-2022-20758

CVE-2022-20758 describes a DoS vulnerability in Cisco IOS XR’s BGP EVPN (L2VPN EVPN) handling. Affects the BGP EVPN processing of updates; an unauthenticated, remote attacker who controls a BGP speaker with a trusted peer connection to an affected device could trigger the vulnerability by sending...

CVE-2025-20154

Summary of CVE-2025-20154 (Cisco TWAMP DoS) : The vulnerability affects Cisco IOS, IOS XE, and IOS XR TWAMP server functionality. It arises from out-of-bounds array access when processing crafted TWAMP control packets, enabling an unauthenticated, remote attacker to cause a reload of the affected...

CVE-2018-0286

Cisco IOS XR Software netconf interface is affected by a Denial of Service vulnerability (CVE-2018-0286). An unauthenticated, remote attacker can send malformed netconf requests to trigger a restart of the netconf process, causing DoS on the device. Root cause: improper handling of malformed requ...

CVE-2023-20135

Cisco IOS XR Software image verification checks contain a TOCTOU race condition during ISO image install queries, enabling an authenticated, local attacker to execute arbitrary code on the device. Affected component: image verification logic in IOS XR. Root cause: TOCTOU between ISO image modific...

CVE-2021-1243

CVE-2021-1243 affects Cisco IOS XR Software, targeting the SNMP management plane protection via the Local Packet Transport Services (LPTS). The root cause is incorrect LPTS programming when SNMP uses management plane protection, enabling an unauthenticated remote attacker to connect to SNMP ports...

CVE-2022-20846

CVE-2022-20846 describes a heap buffer overflow in Cisco IOS XR’s Cisco Discovery Protocol (CDP) messages that allows an unauthenticated, network-adjacent attacker to cause the CDP process to reload on an affected device. The flaw is triggered by specially crafted CDP packets sent within the same...

CVE-2023-20233

Cisco IOS XR Software vulnerability CVE-2023-20233 affects the Connectivity Fault Management (CFM) feature. The issue arises from incorrect processing of invalid CCMs, allowing an unauthenticated, remote attacker to trigger a DoS by crashing the CFM service when attempting to display MEP informat...