CVE-2011-3295

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-05-02 · updated 2026-06-16
Weakness: CWE-20

Description

The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.

Affected products

Cisco IOS XR Software: 3.8.0, 3.8.1, 3.8.2, 3.8.3, 3.8.4, 3.9.0 (+8)

References

http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7
http://www.securitytracker.com/id?1027005
http://www.securitytracker.com/id?1027006
http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7
http://www.securitytracker.com/id?1027005
http://www.securitytracker.com/id?1027006

Get alerted when CVE-2011-3295 or the next vulnerability affects your stack