Vulnerabilities > Cisco > IOS XR > 4.1.0

DATE CVE VULNERABILITY TITLE RISK
2014-07-18 CVE-2014-3321 Improper Input Validation vulnerability in Cisco products
Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149.
5.7
2013-08-13 CVE-2013-3464 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco IOS XR
Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347.
local
low complexity
cisco CWE-119
4.6
2012-05-31 CVE-2012-2488 Improper Input Validation vulnerability in Cisco products
Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593.
network
low complexity
cisco CWE-20
7.8
2011-07-28 CVE-2011-2549 Denial of Service vulnerability in Cisco ASR 9006 Router, ASR 9010 Router and IOS XR
Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service (line-card reload) via an IPv4 packet, aka Bug ID CSCtr26695.
network
low complexity
cisco
7.8