Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*

part: o version: 3.4.0 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIos Xr (1fdc173a-4b87-5d90-8278-3754e22aafd8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-1409 vulnerable 2026-06-08 05:07:31.121728 Details available
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016.
Published: 2016-05-29T22:00:00.000Z
Updated: 2024-08-05T22:55:14.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1407 vulnerable 2026-06-08 05:07:28.338740 Details available
Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576.
Published: 2016-05-25T01:00:00.000Z
Updated: 2024-08-05T22:55:14.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0576 vulnerable 2026-06-08 04:52:03.373284 Details available
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 and CSCsj25893.
Published: 2010-03-25T20:31:00.000Z
Updated: 2024-08-07T00:52:19.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2056 vulnerable 2026-06-08 04:51:26.366890 Details available
Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.
Published: 2009-08-21T17:00:00.000Z
Updated: 2024-09-17T03:37:38.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2055 vulnerable 2026-06-08 04:51:26.350398 Details available
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
Published: 2009-08-19T17:00:00.000Z
Updated: 2026-01-12T20:39:47.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1154 vulnerable 2026-06-08 04:51:13.261506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.