Cisco IOS XR Security Advisory Triage & Maintenance Planner

Router Node Profile

Hardware Platform

Router Deployment Role

Installed IOS XR Release

High Availability & State

BGP Non-Stop Routing (NSR) LPTS Custom Hardware Policing gRPC In-Band Telemetry Active NETCONF/YANG Over SSH

Route Processor (RP) Control-Plane NSR Sync Active

bgp_io DoS CVE-2024-BGP

isis_io Memory Leak

ospf_io Patched

rib_mgr High CPU

Line Card (NPU) & LPTS Hardware Punt Default Policer

lpts_pifib PIFIB Exhaustion

fib_npu Hitless Forwarding

netio Packet Corrupt

Management Plane & API Endpoints Exposed In-Band

emsd / gRPC Unauth Leak

netconf_agent Buffer Overflow

sshd / PAM Session Stall

snmpd Secure ACL

Consolidated Exposure High (Control-Plane Exposure)

Active Vulnerabilities 7 Active CVEs

Patch Strategy Staged SMU Install

Estimated Window Duration 35 min

Advisory ID	Vulnerability Title	Affected Daemon	Severity	Attack Vector	SMU Capability

! Generating Cisco IOS XR Hardening Policy...

# Change Control RFC: Cisco IOS XR Security Patching Window