CVE-2012-1366: Cisco Asr 1001

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.

Affected products

• Cisco Asr 1001
• Cisco Asr 1002
• Cisco Asr 1002-X
• Cisco Asr 1002 Fixed Router
• Cisco Asr 1004
• Cisco Asr 1006
• Cisco Asr 1013
• Cisco Asr 1023 Router
• Cisco Asr 9000 RSP440 Router
• Cisco IOS: version 15.1 only

Published 2014-04-23. Last modified 2026-06-16.