Cisco 7600 Router vulnerabilities

5 CVEs affecting Cisco 7600 Router, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-6693, published 2013-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-4661, published 2012-10-29. High severity, CVSS 9.0. EPSS: 4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,…
CVE-2004-1111, published 2005-01-10. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue…
CVE-2012-4663, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before…
CVE-2012-4662, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before…
CVE-2013-6693, published 2013-11-22. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. The MLDP implementation in Cisco IOS 15.3(3)S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service (chunk corruption and device reload) by…