Skip to content
OpenAdvisories
High WID-SEC-2025-2032 3 CVEs

Cisco IOS XR: Mehrere Schwachstellen

Published Sep 10, 2025 · Updated Sep 10, 2025 · de-DE

Vendor: Cisco Product: IOS XR

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XR ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial-of-Service-Zustand zu verursachen.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 3

  • High 7.4
    CVE-2025-20340

    Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability

    A vulnerability in the Address Resolution Protocol (ARP) implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of service (DoS) condition on an affected device.  This v…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 6.0
    CVE-2025-20248

    Cisco IOS XR Software Image Verification Bypass Vulnerability

    A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR Software image signature verification and load unsigned software on an affected device. To exploit this vulnerability, the…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 5.3
    CVE-2025-20159

    Cisco IOS XR Software Management Interface ACL Bypass Vulnerability

    A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass configured ACLs for the SSH, NetConf, and gRPC features. This vulnerability exists beca…

    Cisco Cisco IOS XR Software iOS Network devices

Revision history

  1. #1

    Initiale Fassung

References