Cisco ASR 1000 Series Routers CVE-2012-5723 Denial of Service Vulnerability

Bugtraq ID:	68242
Class:	Unknown
CVE:	CVE-2012-5723
Remote:	Yes
Local:	No
Published:	Apr 24 2014 12:00AM
Updated:	Apr 24 2014 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS XE 3.7S(.1) Cisco IOS XE 3.7S(.0) Cisco IOS XE 3.7.2S Cisco IOS XE 3.7.1S Cisco IOS XE 3.7.0S Cisco IOS XE 3.6S(.2) Cisco IOS XE 3.6S(.1) Cisco IOS XE 3.6S(.0) Cisco IOS XE 3.6.2S Cisco IOS XE 3.6.1S Cisco IOS XE 3.6.0S Cisco ASR 1013 router 0 Cisco ASR 1006 router 0 Cisco ASR 1004 router 0 Cisco ASR 1002 x router 0 Cisco ASR 1002 router 0 Cisco ASR 1002 fixed router 0 Cisco ASR 1023 router Cisco ASR 1001 router
Not Vulnerable:	Cisco IOS XE 3.8s

Cisco ASR 1000 Series Routers CVE-2012-5723 Denial of Service Vulnerability

The Cisco ASR 1000 Series Routers are prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause the affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCub55948.

Cisco ASR 1000 Series Routers CVE-2012-5723 Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco ASR 1000 Series Routers CVE-2012-5723 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco ASR 1000 Series Routers CVE-2012-5723 Denial of Service Vulnerability

References:

• ASR 1000 Series Routers Software Overview (Cisco)
  
• Caveats in Cisco ASR 1000 Series Aggregation Services Routers Release 3.8S (Cisco)
  
• Cisco Homepage (Cisco )