CVE-2013-1164

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-11 · updated 2026-06-16

Description

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 multicast packets, aka Bug ID CSCtz97563.

Affected products

Cisco Asr 1001: all versions
Cisco Asr 1002: all versions
Cisco Asr 1002-X: all versions
Cisco Asr 1004: all versions
Cisco Asr 1006: all versions
Cisco Asr 1013: all versions
Cisco IOS XE: 3.4.0as, 3.4.0s, 3.4.1s, 3.4.2s, 3.4.3s, 3.5.0s (+1)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000

Get alerted when CVE-2013-1164 or the next vulnerability affects your stack