Cisco Asr 9001 vulnerabilities

8 CVEs affecting Cisco Asr 9001, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6301, published 2015-09-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3308, published 2014-07-07. Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka…
CVE-2014-2176, published 2014-06-14. High severity, CVSS 7.1. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6…
CVE-2015-6301, published 2015-09-20. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service (process reset) via crafted packets, aka Bug ID CSCun72171.
CVE-2015-0694, published 2015-04-11. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access…
CVE-2014-3396, published 2014-10-05. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via…
CVE-2014-3322, published 2014-07-24. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via…
CVE-2014-3335, published 2014-08-26. Medium severity, CVSS 4.6. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of…
CVE-2014-3321, published 2014-07-18. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a…