Vulnerability in Cisco Asr 1001
CVE-2013-1164
Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 multicast packets, aka Bug ID CSCtz97563.
EPSS: 0.019 (77.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Asr_1001
- Cisco Asr_1002
- Cisco Asr_1002-x
- Cisco Asr_1004
- Cisco Asr_1006
- Cisco Asr_1013
- Cisco Ios_xe — versions 3.4.0as, 3.4.0s, 3.4.1s
- N/a — versions n/a
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)