CVE-2006-1928: Cisco IOS XR

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or "MPLS packet handling problems") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531.

Affected products

• Cisco IOS XR: version 3.0.1 only; version 3.1.0 only; version 3.2 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; …

Published 2006-04-20. Last modified 2026-06-16.