What’s Vulnerable › Vulnerabilities

CVE-2013-2779

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-04-11 · updated 2026-06-16
• Weakness: CWE-20

Description

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 MVPN (aka MVPNv6) packets, aka Bug ID CSCub34945, a different vulnerability than CVE-2013-1164.

Affected products

• Cisco Asr 1001: all versions
• Cisco Asr 1002: all versions
• Cisco Asr 1002-X: all versions
• Cisco Asr 1002 Fixed Router: all versions
• Cisco Asr 1004: all versions
• Cisco Asr 1006: all versions
• Cisco Asr 1013: all versions
• Cisco Asr 1023 Router: all versions
• Cisco IOS XE: 3.4.0as, 3.4.0s, 3.4.1s, 3.4.2s, 3.4.3s, 3.4.4s (+9)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000

Get alerted when CVE-2013-2779 or the next vulnerability affects your stack