PT-2012-1681 · Cisco · Cisco Carrier Routing System

Published 2012-05-02 · Updated 2017-12-07 · CVE-2011-3283

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Carrier Routing System version 3.9.1

Description The issue allows remote attackers to cause a denial of service, resulting in a Metro subsystem crash. This can be achieved by sending a fragmented GRE packet.

Recommendations For Cisco Carrier Routing System version 3.9.1, consider implementing packet filtering to block fragmented GRE packets as a temporary workaround until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-3283

Affected Products

Cisco Carrier Routing System

References · 4

• http://cisco.com/cisco/software/release.html?mdfid=280777815&softwareid=280867577&release=3.9.1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-3283 · Security Note
• http://securitytracker.com/id?1027006 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75341 · Note