Summary

• Cisco released its semiannual Cisco IOS XR Software Security Advisory Bundled Publication on March 12, 2025. In direct response to customer feedback, Cisco releases bundles of Cisco IOS XR Software Security Advisories on the second Wednesday of the month in March and September of each calendar year.

  The March 12, 2025, release of the Cisco IOS XR Software Security Advisory Bundled Publication includes 10 Cisco Security Advisories that describe 10 vulnerabilities in Cisco IOS XR Software. Cisco has released software updates that address these vulnerabilities.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  Cisco IOS XR Software CLI Privilege Escalation Vulnerability	CVE-2025-20138	High	8.8
  Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability	CVE-2025-20142	High	8.6
  Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Denial of Service Vulnerability	CVE-2025-20146	High	8.6
  Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability	CVE-2025-20209	High	7.5
  Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerability	CVE-2025-20141	High	7.4
  Cisco IOS XR Software Image Verification Bypass Vulnerability	CVE-2025-20177	High	6.7
  Cisco IOS XR Software Secure Boot Bypass Vulnerability	CVE-2025-20143	High	6.7
  Cisco IOS XR Software Border Gateway Protocol Confederation Denial of Service Vulnerability	CVE-2025-20115	Medium	8.6
  Cisco IOS XR Software Access Control List Bypass Vulnerability	CVE-2025-20145	Medium	5.8
  Cisco IOS XR Software Hybrid Access Control List Bypass Vulnerability	CVE-2025-20144	Medium	4

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A