According to its self-reported version, IOS-XR is affected by multiple denial of service vulnerabilities:

  - A denial of service vulnerability exists in Cisco IOS XR due to a logic error that occurs when an affected     device processes Telnet protocol packets. An unauthenticated, remote attacker can exploit this, by sending     specific streams of packets to an affected device, to cause the enf_broker process to crash, which could     lead to system instability and the inability to process or forward traffic through the device.
    (CVE-2021-1288)

  - A denial of service vulnerability exists in Cisco IOS XR due to improper resource allocation when     processing either ICMP or Telnet packets. An unauthenticated, remote attacker can exploit this, by sending     specific streams of packets to an affected device, to cause the enf_broker process to leak system memory,     which could cause the enf_broker process to crash, which could lead to system instability and the     inability to process or forward traffic through the device. (CVE-2021-1313)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Detections

Analytics

Cisco IOS XR Software Enf Broker DoS (cisco-sa-iosxr-dos-WwDdghs2)

high Nessus Plugin ID 148250

Version 1.8