- Vulnerability/
- cisco-sa-iosxr-priv-esc-GFQjxvOF
cisco-sa-iosxr-priv-esc-GFQjxvOF: Cisco IOS XR Software CLI Privilege Escalation Vulnerability
First published: Wed Mar 12 2025(Updated: )
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device.This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the prompt. A successful exploit could allow the attacker to elevate privileges to root and execute arbitrary commands.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-priv-esc-GFQjxvOFThis advisory is part of the March 2025 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2025 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XRv 9000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-iosxr-priv-esc-GFQjxvOF?
The vulnerability cisco-sa-iosxr-priv-esc-GFQjxvOF is classified as a high severity issue due to its potential to allow arbitrary command execution with root privileges.
How do I fix cisco-sa-iosxr-priv-esc-GFQjxvOF?
To remediate the cisco-sa-iosxr-priv-esc-GFQjxvOF vulnerability, it is recommended to apply the latest security patches provided by Cisco for the IOS XR Software.
Who is affected by cisco-sa-iosxr-priv-esc-GFQjxvOF?
The cisco-sa-iosxr-priv-esc-GFQjxvOF vulnerability affects devices running Cisco IOS XR Software, specifically in environments where local authentication is used.
What are the potential impacts of cisco-sa-iosxr-priv-esc-GFQjxvOF?
If exploited, the cisco-sa-iosxr-priv-esc-GFQjxvOF vulnerability can allow an attacker to execute arbitrary commands on the operating system, compromising the integrity and security of the device.
What is the cause of cisco-sa-iosxr-priv-esc-GFQjxvOF?
The cisco-sa-iosxr-priv-esc-GFQjxvOF vulnerability is caused by insufficient validation of user arguments passed to specific CLI commands in Cisco IOS XR Software.
- collector/cisco-recent
- source/Cisco
- agent/title
- agent/references
- agent/last-modified-date
- agent/severity
- agent/source
- agent/description
- agent/first-publish-date
- agent/type
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco ios xrv 9000