Skip to content
OpenAdvisories
High WID-SEC-2025-0553 8 CVEs

Cisco IOS XR: Mehrere Schwachstellen

Published Mar 12, 2025 · Updated Mar 12, 2025 · de-DE

Vendor: Cisco Product: IOS XR

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XR ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, erhöhte Rechte zu erlangen, beliebigen Code auszuführen und Daten zu manipulieren.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 8

  • High 8.8
    CVE-2025-20138

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user argum…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.6
    CVE-2025-20115 Public exploit

    Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

    A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to a memory corruption …

    Cisco Cisco IOS XR Software iOS Network devices
  • High 7.5
    CVE-2025-20209

    Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability

    A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets.  This vulnerability is due to im…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 7.4
    CVE-2025-20141

    Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity

    A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multiple Cisco…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 6.7
    CVE-2025-20143

    Cisco IOS XR Software Secure Boot Bypass Vulnerability

    A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attac…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 6.7
    CVE-2025-20177

    Cisco IOS XR Software Image Verification Bypass Vulnerability

    A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified software on an affected device. To exploit this vulnerability, the attacker must …

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 5.8
    CVE-2025-20145

    Cisco IOS XR Software Access Control List Bypass Vulnerability

    A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly …

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 4.0
    CVE-2025-20144

    Cisco IOS XR Software Access Control List Bypass Vulnerability

    A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect handling of packets when a specific …

    Cisco Cisco IOS XR Software iOS Network devices

Revision history

  1. #1

    Initiale Fassung

References