Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:x64:*
part: o version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Ios Xr (1fdc173a-4b87-5d90-8278-3754e22aafd8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | x64 |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-20138 |
vulnerable | 2026-06-08 07:08:40.053711 |
Cisco IOS XR Software CLI Privilege Escalation Vulnerability
HIGH (8.8)
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device.
This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the prompt. A successful exploit could allow the attacker to elevate privileges to root and execute arbitrary commands.
Published: 2025-03-12T16:12:06.736Z
Updated: 2026-02-26T19:09:35.478Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1485 |
vulnerable | 2026-06-08 05:28:14.767307 |
Cisco IOS XR Software Command Injection Vulnerability
MEDIUM (6.6)
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges on the underlying Linux operating system (OS) of an affected device. This vulnerability is due to insufficient input validation of commands that are supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to an affected command. A successful exploit could allow the attacker to execute commands on the underlying Linux OS with root privileges.
Published: 2021-04-08T04:07:22.485Z
Updated: 2024-11-08T23:26:01.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1710 |
vulnerable | 2026-06-08 05:13:26.938742 |
Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability
CRITICAL (9.8)
A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vulnerability is due to incorrect isolation of the secondary management interface from internal sysadmin applications. An attacker could exploit this vulnerability by connecting to one of the listening internal applications. A successful exploit could result in unstable conditions, including both a denial of service and remote unauthenticated access to the device. This vulnerability has been fixed in Cisco IOS XR 64-bit Software Release 6.5.3 and 7.0.1, which will edit the calvados_boostrap.cfg file and reload the device.
Published: 2019-04-17T21:50:14.866Z
Updated: 2024-11-19T19:11:48.768Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.