What’s Vulnerable › Vulnerabilities

CVE-2012-5723

• Severity: medium (CVSS 6.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-24 · updated 2026-06-16
• Weakness: CWE-20

Description

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

Affected products

• Cisco Asr 1001: all versions
• Cisco Asr 1002: all versions
• Cisco Asr 1002-X: all versions
• Cisco Asr 1002 Fixed Router: all versions
• Cisco Asr 1004: all versions
• Cisco Asr 1006: all versions
• Cisco Asr 1013: all versions
• Cisco Asr 1023 Router: all versions
• Cisco IOS XE: through 3.7s\(.1\); 3.6.0s, 3.6.1s, 3.6.2s, 3.6s(.0), 3.6s(.1), 3.6s(.2) (+4)

References

• http://www.cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_caveats_38s.html
• http://www.cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_caveats_38s.html

Get alerted when CVE-2012-5723 or the next vulnerability affects your stack