PT-2011-3265 · Cisco · Cisco Ios Xr

Published 2011-05-31 · Updated 2011-09-07 · CVE-2011-1651

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.9.x through 4.0.x before 4.0.3 Cisco IOS XR versions 4.1.x before 4.1.1

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a crafted IPv4 packet when an SPA interface processor is installed.

Recommendations For Cisco IOS XR versions 3.9.x through 4.0.x before 4.0.3, update to version 4.0.3 or later. For Cisco IOS XR versions 4.1.x before 4.1.1, update to version 4.1.1 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-1651

Affected Products

Cisco Ios Xr

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-1651 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b7f191.shtml · Vendor Advisory
• http://securitytracker.com/id?1025567 · Note