Vulnerabilities > Cisco > IOS XR > 6.4.1.base

DATE CVE VULNERABILITY TITLE RISK
2019-02-21 CVE-2019-1681 Path Traversal vulnerability in Cisco IOS XR
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure.
network
low complexity
cisco CWE-22
7.5
2017-11-30 CVE-2017-12355 Improper Input Validation vulnerability in Cisco IOS XR 6.4.1Base
A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service (DoS) condition.
network
low complexity
cisco CWE-20
5.3