CVE-2011-1651

Published: May 31, 2011Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCto45095.

Affected (8)

Products: Cisco: Ios Xr

Cisco

1 product

Ios Xr

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xr	Version 3.0
Cisco Ios Xr	Version 3.9.0
Cisco Ios Xr	Version 3.9.1
Cisco Ios Xr	Version 3.9.2
Cisco Ios Xr	Version 4.0.0
Cisco Ios Xr	Version 4.0.1
Cisco Ios Xr	Version 4.0.2
Cisco Ios Xr	Version 4.1

Related CWEs

CWE-399

References (4)

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f191.shtml

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id?1025567

Source: psirt@cisco.com

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f191.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id?1025567

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.