Cisco Cisco ASR 5000 Series Software

Name: Cisco Cisco ASR 5000 Series Software
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical11high12medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-32433US	—OT critical	98.9% (100th)	KEV	no fix	2025-04-16	—
CVE-2018-0239US	high7.5	3.35% (89th)	Exploit	no fix	2018-04-19	—
CVE-2018-0273US	medium5.3	3.16% (88th)	—	no fix	2018-04-19	—
CVE-2019-1869US	high7.5	2.64% (85th)	—	21.11.1	2019-06-20	2 versions
CVE-2017-6729US	high7.5	2.30% (83rd)	—	no fix	2017-07-10	—
CVE-2018-0369US	high8.6	2.27% (83rd)	—	no fix	2018-07-16	—
CVE-2020-3500US	high8.6	1.62% (76th)	—	no fix	2020-08-17	2 versions
CVE-2023-20046US	high8.8	1.56% (75th)	—	no fix	2023-05-09	405 versions
CVE-2018-0256US	medium5.8	1.52% (74th)	—	no fix	2018-04-19	—
CVE-2021-1378US	high7.5	1.50% (74th)	—	no fix	2021-02-17	2 versions
CVE-2019-16026US	medium5.9	1.39% (72nd)	—	n/a	2020-01-26	2 versions
CVE-2021-1353US	high8.6	1.30% (70th)	—	no fix	2021-01-20	2 versions
CVE-2021-1145US	medium6.5	1.29% (70th)	—	no fix	2021-01-13	2 versions
CVE-2021-1539US	high8.8OT elevated	1.09% (65th)	—	no fix	2021-06-04	2 versions
CVE-2021-1540US	high7.2OT elevated	1.05% (64th)	—	no fix	2021-06-04	2 versions
CVE-2020-3244US	medium5.3	1.01% (63rd)	—	no fix	2020-06-18	2 versions
CVE-2023-20051US	high7.5	0.87% (58th)	—	no fix	2023-04-05	2 versions
CVE-2018-0217US	medium6.7	0.86% (58th)	—	no fix	2018-03-08	—
CVE-2021-1424US	—	0.81% (57th)	—	no fix	2024-11-18	223 versions
CVE-2018-0224US	medium6.7	0.45% (39th)	—	no fix	2018-03-08	—
CVE-2018-0115US	medium6.7	0.45% (39th)	—	no fix	2018-01-18	—
CVE-2020-3602US	medium6.7	0.39% (33rd)	—	no fix	2020-10-08	2 versions
CVE-2020-3601US	medium6.7	0.38% (31st)	—	no fix	2020-10-08	2 versions
CVE-2018-0122US	medium4.4	0.37% (31st)	—	no fix	2018-02-08	—
CVE-2022-20665US	medium6.7	0.31% (23rd)	—	no fix	2022-04-06	2 versions
CVE-2020-3324US	—	—	—	no fix	2020-10-14	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation10 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-255CWE-2551 CVEs
CWE-289Authentication Bypass by Alternate Name1 CVEs

sources (2)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)26 CVEs
EUEU Vulnerability Database (ENISA)15 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan