NetSight
medium6.1

CVE-2012-5723

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted …

Impact

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

Affected products

VendorProductAffected versions
CiscoIos Xe
through 3.7s\(.1\)
Versions 3.6.0s, 3.6.1s, 3.6.2s, 3.6s\(.0\), 3.6s\(.1\)
CiscoAsr 1001
All versions
CiscoAsr 1002
All versions
CiscoAsr 1002-X
All versions
CiscoAsr 1002 Fixed Router
All versions
CiscoAsr 1004
All versions
CiscoAsr 1006
All versions
CiscoAsr 1013
All versions
CiscoAsr 1023 Router
All versions

Weakness classification

References