CVE-2021-1288

HIGH

Cisco IOS XR 5.0.0-5.2.5 - Unauthenticated Denial of Service via Ingress Packet Processing

Title source: llm

Description

Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dos-WwDdghs2

Scores

CVSS v3 8.6

EPSS 0.0060

EPSS Percentile 69.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-399

Status published

Products (1)

cisco/ios_xr 5.0.0 - 5.2.6

Published Feb 04, 2021

Tracked Since Feb 18, 2026