Lucene search

PRIOn knowledge basePRION:CVE-2012-5723

HistoryApr 24, 2014 - 10:55 a.m.

Code injection

2014-04-2410:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

6.1 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

58.7%

JSON

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CPENameOperatorVersion
ios_xeeq<= 3.7s.1
ios_xeeq3.6.115
ios_xeeq3.6.1115
ios_xeeq3.6.2115
ios_xeeq3.6.1150
ios_xeeq3.6.1151
ios_xeeq3.6.1152
ios_xeeq3.7.115
ios_xeeq3.7.1115
ios_xeeq3.7.2115

Name	Operator	Version
ios_xe	eq	<= 3.7s.1
ios_xe	eq	3.6.115
ios_xe	eq	3.6.1115
ios_xe	eq	3.6.2115
ios_xe	eq	3.6.1150
ios_xe	eq	3.6.1151
ios_xe	eq	3.6.1152
ios_xe	eq	3.7.115
ios_xe	eq	3.7.1115
ios_xe	eq	3.7.2115

Rows per page:

1-10 of 111

References

www.cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_caveats_38s.html

7.4 High

AI Score

Confidence

Low

6.1 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

58.7%

JSON

Related for PRION:CVE-2012-5723