Cisco Asr 9000 RSP440 Router vulnerabilities

7 CVEs affecting Cisco Asr 9000 RSP440 Router, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3396, published 2014-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3308, published 2014-07-07. Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka…
CVE-2012-2488, published 2012-05-31. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs…
CVE-2014-3396, published 2014-10-05. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via…
CVE-2014-3322, published 2014-07-24. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via…
CVE-2014-3335, published 2014-08-26. Medium severity, CVSS 4.6. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of…
CVE-2012-1366, published 2014-04-23. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted…
CVE-2014-3321, published 2014-07-18. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a…