Improper input validation in Cisco iOS Xr

CVE-2014-2144

Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect messages, aka Bug ID CSCum14266.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.007 (51.0th percentile) — read the EPSS interpretation.