VulnerabilityModified

CVE-2011-0943

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147.

HIGH 7.8EPSS 1.21%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147.

CVSS 2.0: 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS: 1.21% probability · 67th percentile
CISA KEV: Not listed
Weakness: CWE-399
Affected: cisco/ios xr
Source: psirt@cisco.com

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18e.shtmlVendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18e.shtmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.