Warning: multiple high & medium vulnerabilities in Cisco IOS XR Router software that can lead to Denial-of-Service, patch immediately!

CVE-2025-20138:

A local-network attacker, who has been previously authenticated, with low privileges can modify OS commands using CLI by including special elements in their input. The threat actor can exploit this to escalate privileges and gain root access, which can allow them to execute any command.

CVE-2025-20146:

An unauthenticated remote threat actor can cause the line card of a CISCO router to reset by giving arbitrary code as an input which sends crafted IPv4 multicast packets through the router. This stems from the lack of proper input validation. This way the network-based attacker can cause Denial-of-Service. During the device reset, the incoming and outgoing network traffic to the router is lost.

CVE-2025-20142:

An unauthenticated threat actor can remotely cause the line card of a CISCO router to reset by giving arbitrary code as an input which sends crafted IPv4 multicast packets through the router. This stems from the lack of proper input validation, which decreases the Quality of Service (QoS) of the device. This way the network-based attacker can cause Denial-of-Service. During the device reset, the incoming and outgoing network traffic to the router is lost. CVE-2025-20142 affects mostly the Layer 2 VPN environment.

CVE-2025-20115:

A remote threat actor who has been previously authenticated can cause the program to crash or lead it to an infinite loop by modifying the Border Gateway Protocol (BGP) and copying the input buffer to an output buffer. This occurs because the program does not check the size of both buffers. This way the network-based attacker can cause Denial-of-Service..

CVE-2025-20209:

An unauthenticated remote threat actor can send malformed Internet Key Exchange version 2 (IKEv2) packets and limitlessly allocate resources to overwhelm the device and make it unable to process UDP packets. This way the network-based attacker can cause Denial-of-Service.

CVE-2025-20141:

An unauthenticated threat actor in an adjacent network can render the control plane traffic useless by directing data packets to the route processor of the device without limits. This way the attacker can cause Denial-of-Service.