CVE-2019-16027

Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

MEDIUM

6.5

CVSS Score

Published: January 26, 2020 at 04:31 AM UTC

Updated: June 17, 2026 at 02:21 AM UTC

32 products affected across 1 vendorIOS XrAsr 9010Asr 9904

Using Cisco IOS XR Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XR Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 2%

SSVC

No known exploit

Description

A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the IS–IS process. The vulnerability is due to improper handling of a Simple Network Management Protocol (SNMP) request for specific Object Identifiers (OIDs) by the IS–IS process. An attacker could exploit this vulnerability by sending a crafted SNMP request to the affected device. A successful exploit could allow the attacker to cause a DoS condition in the IS–IS process.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xr · Cisco

95%

4.3.2 5.2.5 6.1.2 6.1.3 6.1.4 6.2.2 6.2.25 6.2.3 6.3.15 6.3.2 6.3.3 6.4.2 6.5.2 6.5.3 6.6.1 6.6.2 6.6.25

cisco-asr-9000 (environment) · cisco-asr-9000v (environment) · cisco-asr-9001 (environment) · cisco-asr-9006 (environment) · cisco-asr-9010 (environment) · cisco-asr-9901 (environment) · cisco-asr-9903 (environment) · cisco-asr-9904 (environment) · cisco-asr-9906 (environment) · cisco-asr-9910 (environment) · cisco-asr-9912 (environment) · cisco-asr-9920 (environment) · cisco-asr-9922 (environment) · cisco-crs (environment) · cisco-ncs-5001 (environment) · cisco-ncs-5002 (environment) · cisco-ncs-5011 (environment) · cisco-ncs-540 (environment) · cisco-ncs-5500 (environment) · cisco-ncs-5501 (environment) · cisco-ncs-5502 (environment) · cisco-ncs-5508 (environment) · cisco-ncs-5516 (environment) · cisco-ncs-560 (environment) · cisco-ncs-6000 (environment) · cisco-ncs-6008 (environment) · cisco-xr-12404 (environment) · cisco-xr-12406 (environment) · cisco-xr-12410 (environment) · cisco-xr-12416 (environment) · cisco-xrv-9000 (environment)

Asr 9000 · Ciscodevice

80%

All versions

Asr 9000V · Ciscodevice

80%

All versions

Asr 9001 · Ciscodevice

80%

All versions

Asr 9006 · Ciscodevice

80%

All versions