Code injection

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

CVE-2015-6268: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...

CVE-2015-6273: Undefined Security Weakness

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

PT-2015-1978

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the operating system. It can be exploited by a remote attacker using specially crafted UDP packets, potentially leading ...

PT-2015-1983

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 3.1.2S Description The issue is related to the mishandling of Virtual Fragment Reassembly VFR setup by certain firewall and NAT components, which can be exploited by remote attackers to cause a denial of service...

CVE-2015-6267: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496...

CVE-2015-4291: Undefined Security Weakness

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...

Cisco IOS XE Software for 1000 Series Aggregation Services Routers H.323 DoS

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR is affected by a flaw in the Embedded Services Processor ESP due to improper handling of malformed H.323 packets when the device is configured to use Network Address Translation NAT. An unauthenticated, remote attacker by...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...