PT-2014-2362 · Cisco · Cisco Asr 1000

Publicado 2014-04-24 · Atualizado 2021-10-05 · CVE-2012-5723

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 devices with software before 3.8S

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This can be achieved by sending crafted broadcast or multicast ICMP packets with fragmentation when BDI routing is enabled.

Recommendations For Cisco ASR 1000 devices with software before 3.8S, update to version 3.8S or later to resolve the issue. As a temporary workaround, consider disabling BDI routing to minimize the risk of exploitation. Restrict access to the device to prevent the sending of crafted ICMP packets.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-5723

Produtos afetados

Cisco Asr 1000

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-5723 · Nota de Segurança
• http://cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_caveats_38s.html · Nota