Cisco Asr 1002-X vulnerabilities

14 CVEs affecting Cisco Asr 1002-X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3284, published 2014-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2779, published 2013-04-11. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE)…
CVE-2013-1167, published 2013-04-11. High severity, CVSS 7.1. EPSS: 2% chance of exploitation in the next 30 days. Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of…
CVE-2013-5547, published 2013-10-31. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malformed EoGRE packets over (1) IPv4 or (2) IPv6, aka Bug ID…
CVE-2013-1164, published 2013-04-11. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows…
CVE-2013-5546, published 2013-10-31. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via large TCP packets that…
CVE-2013-5545, published 2013-10-31. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending many PPTP packets over NAT, aka Bug…
CVE-2013-5543, published 2013-10-31. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1)…
CVE-2013-1166, published 2013-04-11. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers…
CVE-2013-1165, published 2013-04-11. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by…
CVE-2012-5017, published 2014-04-23. Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days. Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID…

Latest

CVE-2014-3284, published 2014-05-25. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.
CVE-2014-2183, published 2014-04-29. Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days. The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID…
CVE-2012-5723, published 2014-04-24. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP…
CVE-2012-1366, published 2014-04-23. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted…