A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service
A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability exists because the software insufficiently validates ingress traffic on the ASIC…
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IOS XE Software | 3.13.6aS, 3.16.0aS, 3.16.1aS, 3.16.2aS, 3.16.3aS, 3.16.4S, 3.16.4bS, 3.16.4gS, 3.16.5S, 3.16.4cS, 3.16.4dS, 3.16.4eS, 3.16.6S, 3.16.5aS, 3.16.7S, 3.16.6bS, 3.16.7bS, 3.16.8S, 3.17.0S, 3.17.1S, 3.17.2S, 3.17.3S, 3.17.4S, 16.5.1, 16.5.2, 16.5.3, 3.18.0S, 3.18.1S, 3.18.2S, 3.18.3S, 3.18.4S, 3.18.0SP, 3.18.1SP, 3.18.1gSP, 3.18.1bSP, 3.18.2SP, 3.18.1hSP, 3.18.1iSP, 3.18.3SP, 3.18.4SP, 16.6.1, 16.6.2, 16.6.3, 16.6.4, 16.7.1, 16.7.2, 16.8.1, 16.8.1b, 16.8.1c |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.