CVE-2006-1928

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-20 · updated 2026-06-16

Description

Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or "MPLS packet handling problems") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531.

Affected products

Cisco IOS XR Software: 3.0.1, 3.1.0, 3.2, 3.2.1, 3.2.2, 3.2.3 (+2)

References

http://secunia.com/advisories/19740
http://securitytracker.com/id?1015964
http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml
http://www.osvdb.org/24811
http://www.securityfocus.com/bid/17607
http://www.vupen.com/english/advisories/2006/1433
https://exchange.xforce.ibmcloud.com/vulnerabilities/25881
http://secunia.com/advisories/19740
http://securitytracker.com/id?1015964
http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml
http://www.osvdb.org/24811
http://www.securityfocus.com/bid/17607

Get alerted when CVE-2006-1928 or the next vulnerability affects your stack