Read the docs
TI-2019-01336 Aliases CVE-2019-1710GHSA-hj3w-wg7f-x694

Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability

Priority MEDIUM 54CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA.

Summary

A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vulnerability is due to incorrect isolation of the secondary management interface from internal sysadmin applications. An attacker could exploit this vulnerability by connecting to one of the listening internal applications. A successful exploit could result in unstable conditions, including both a denial of service and remote unauthenticated access to the device. This vulnerability has been fixed in Cisco IOS XR 64-bit Software Release 6.5.3 and 7.0.1, which will edit the calvados_boostrap.cfg file and reload the device.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02751 86th percentileScored 2026-11-07
Fix Fixed Cisco IOS XR Software (Cisco): 6.5.3, 7.0.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco IOS XR Softwarebefore 6.5.3; before 7.0.16.5.3, 7.0.1Patch availableCNA
  • Cisco IOS XR Software VendorCisco Affected before 6.5.3; before 7.0.1 Fixed in 6.5.3, 7.0.1 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:x64:*before 6.5.3; 7.0 to before 7.0.1VulnerableCisco
cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:x64:* Versions before 6.5.3; 7.0 to before 7.0.1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

  • Fix · CNA Cisco IOS XR Software (Cisco) Fixed in 6.5.3, 7.0.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-1710
  2. 2026-10-03 Alias added: GHSA-hj3w-wg7f-x694

References

Advisory 1

  • TI-2020-02680 Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability KEVCVSS 3.1HIGH 8.8
  • TI-2018-00135 Memory corruption in Cisco IOS, IOS XE, and IOS XR KEVCVSS 3.1HIGH 8.8
  • TI-2020-03113 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities KEVCVSS 3.1HIGH 8.6
  • TI-2020-03110 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability KEVCVSS 3.1HIGH 8.6
  • TI-2018-00142 Memory corruption in Cisco IOS, IOS XE, and IOS XR KEVCVSS 3.1HIGH 8.0
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
See all 199 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences