CVE-2011-1651: Cisco IOS XR

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCto45095.

Affected products

• Cisco IOS XR: version 3.0 only; version 3.9.0 only; version 3.9.1 only; version 3.9.2 only; version 4.0.0 only; version 4.0.1 only; …

Published 2011-05-31. Last modified 2026-06-16.