Cisco Asr 1013 vulnerabilities

7 CVEs affecting Cisco Asr 1013, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3284, published 2014-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2779, published 2013-04-11. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE)…
CVE-2013-1167, published 2013-04-11. High severity, CVSS 7.1. EPSS: 2% chance of exploitation in the next 30 days. Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of…
CVE-2013-1164, published 2013-04-11. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows…
CVE-2014-2183, published 2014-04-29. Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days. The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID…
CVE-2014-3284, published 2014-05-25. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.
CVE-2012-1366, published 2014-04-23. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted…
CVE-2012-5723, published 2014-04-24. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP…