Cisco 12000 Router vulnerabilities

7 CVEs affecting Cisco 12000 Router, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-0867, published 2001-12-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2001-0867, published 2001-12-06. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote…
CVE-2001-0866, published 2001-12-06. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could…
CVE-2001-0863, published 2001-12-06. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers…
CVE-2001-0861, published 2001-12-06. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a…
CVE-2001-0862, published 2001-12-06. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL.
CVE-2001-0865, published 2001-12-06. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.
CVE-2001-0864, published 2001-12-06. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow…