Code injection

2014-04-2410:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CPENameOperatorVersion
ios_xeeq<= 3.7s.1
ios_xeeq3.6.115
ios_xeeq3.6.1115
ios_xeeq3.6.2115
ios_xeeq3.6.1150
ios_xeeq3.6.1151
ios_xeeq3.6.1152
ios_xeeq3.7.115
ios_xeeq3.7.1115
ios_xeeq3.7.2115

Name	Operator	Version
ios_xe	eq	<= 3.7s.1
ios_xe	eq	3.6.115
ios_xe	eq	3.6.1115
ios_xe	eq	3.6.2115
ios_xe	eq	3.6.1150
ios_xe	eq	3.6.1151
ios_xe	eq	3.6.1152
ios_xe	eq	3.7.115
ios_xe	eq	3.7.1115
ios_xe	eq	3.7.2115