CVE-2012-2488 Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty945...
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios xr | <= 4.2.0 | No fix listed |
| cisco ios xr | = 4.0.3 | No fix listed |
| cisco ios xr | = 4.0.4 | No fix listed |
| cisco ios xr | = 4.1 | No fix listed |
| cisco ios xr | = 4.1.1 | No fix listed |
| cisco ios xr | = 4.1.2 | No fix listed |
| cisco ios xr | = 4.2.0 | No fix listed |
| cisco asr 9000 rsp440 router | All versions | No fix listed |
| cisco crs performance route processor | All versions | No fix listed |
References
- 49329 third-party-advisory
- 20120530 Cisco IOS XR Software Route Processor Denial of Service Vulnerability vendor-advisory
- 53728 vdb-entry
- 1027104 vdb-entry