Cisco Event Response Page
Cisco Event Response: April 2022 Cisco IOS XR Software Security Advisory Bundled Publication
-
Cisco released its semiannual Cisco IOS XR Software Security Advisory Bundled Publication on April 13, 2022. In direct response to customer feedback, Cisco releases bundles of Cisco IOS XR Software Security Advisories on the second Wednesday of the month in March and September of each calendar year.
The April 13, 2022, release of the Cisco IOS XR Software Security Advisory Bundled Publication includes two Cisco Security Advisories that describe two vulnerabilities in Cisco IOS XR Software. Cisco has released software updates that address these vulnerabilities.
-
The following table identifies Cisco Security content that is associated with this bundled publication:
Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score cisco-sa-lsplus-Z6AQEOjk
Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service VulnerabilityCVE-2022-20714High8.6cisco-sa-bgpevpn-zWTRtPBb
Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service VulnerabilityCVE-2022-20758Medium6.8Related Resources
Cisco Security Vulnerability Policy
MITRE Common Vulnerabilities and Exposures
Common Vulnerability Scoring System and the Security Impact Rating
Common Vulnerability Scoring System Q & A