Cisco Carrier Routing System vulnerabilities

8 CVEs affecting Cisco Carrier Routing System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1918, published 2019-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0618, published 2015-02-21. High severity, CVSS 7.1. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X (CRS-X) devices allows remote attackers to cause a denial of service…
CVE-2018-0132, published 2018-02-08. High severity, CVSS 8.6. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base…
CVE-2013-1112, published 2013-01-31. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136.
CVE-2011-3283, published 2012-05-02. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash) via a fragmented GRE packet, aka Bug ID CSCts14887.
CVE-2012-1342, published 2012-08-06. Medium severity, CVSS 5.8. EPSS: 1.5% chance of exploitation in the next 30 days. Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975.
CVE-2016-6401, published 2016-09-17. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service (line-card reload) via…
CVE-2019-1918, published 2019-08-07. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the implementation of Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated…
CVE-2019-1910, published 2019-08-07. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an…