CVE-2014-8005: Cisco IOS XR

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (process reload) by establishing many TCP sessions, aka Bug ID CSCuq45239.

Affected products

• Cisco IOS XR: up to and including 5.1.0

Published 2014-11-26. Last modified 2026-06-17.