Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Technical Severity

MEDIUM

5.9 / 10

Minimal Risk Critical

Vector Specification

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitation Likelihood

0.61 %

Predictive Probability

Percentile Rank

69.3 th

Documented as more likely to be exploited than 69.3% of known CVEs.

Detection Date

Mar 25, 2022

Remediation Due

Apr 15, 2022

CISA Catalog Active

Threat Analysis

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

Apply updates per vendor instructions.

Vendor Identity

Cisco

Affected Product

IOS XR

Ransomware Status

Campaign Use Unknown

Weakness Classification

CWE-20

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2009-2055