PT-2014-2362 · Cisco · Cisco Asr 1000

Published 2014-04-24 · Updated 2021-10-05 · CVE-2012-5723

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 devices with software before 3.8S

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This can be achieved by sending crafted broadcast or multicast ICMP packets with fragmentation when BDI routing is enabled.

Recommendations For Cisco ASR 1000 devices with software before 3.8S, update to version 3.8S or later to resolve the issue. As a temporary workaround, consider disabling BDI routing to minimize the risk of exploitation. Restrict access to the device to prevent the sending of crafted ICMP packets.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-5723

Affected Products

Cisco Asr 1000

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-5723 · Security Note
• http://cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_caveats_38s.html · Note