Cisco Event Response Page
Cisco Event Response: September 2023 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication
-
Cisco released its semiannual Cisco IOS XR Software Security Advisory Bundled Publication on September 13, 2023. In direct response to customer feedback, Cisco releases bundles of Cisco IOS XR Software Security Advisories on the second Wednesday of the month in March and September of each calendar year.
The September 13, 2023, release of the Cisco IOS XR Software Security Advisory Bundled Publication includes six Cisco Security Advisories that describe eight vulnerabilities in Cisco IOS XR Software. Cisco has released software updates that address these vulnerabilities.
-
The following table identifies Cisco Security content that is associated with this bundled publication:
Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability CVE-2023-20236Medium6.7Cisco IOS XR Software Access Control List Bypass Vulnerability CVE-2023-20191Medium5.8Cisco IOS XR Software Compression ACL Bypass Vulnerability CVE-2023-20190Medium5.8Cisco IOS XR Software Image Verification Vulnerability CVE-2023-20135Medium5.7Cisco IOS XR Software Connectivity Fault Management Denial of Service Vulnerability CVE-2023-20233Medium4.3Cisco IOS XR Software Model-Driven Programmability Behavior with AAA Authorization —Informational—Related Resources
Cisco Security Vulnerability Policy
MITRE Common Vulnerabilities and Exposures
Common Vulnerability Scoring System and the Security Impact Rating
Common Vulnerability Scoring System Q & A