CVE-2006-1928: Medium severity Cisco IOS XR vulnerability

Published Apr 20, 2006

Updated

Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or "MPLS packet handling problems") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531.

Affected Software

9 affected components

Cisco IOS XR=3.0.1

Cisco IOS XR=3.1.0

Cisco IOS XR=3.2

Cisco IOS XR=3.2.1

Cisco IOS XR=3.2.2

Cisco IOS XR=3.2.3

Cisco IOS XR=3.2.4

Cisco IOS XR=3.2.50

Event History

Apr 20, 2006

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1928?

CVE-2006-1928 has a severity rating that typically indicates a high risk of denial of service due to potential crashes in affected Cisco devices.

How do I fix CVE-2006-1928?

Fixing CVE-2006-1928 involves upgrading Cisco IOS XR to a version that addresses this vulnerability, such as 3.2.4 or later.

Which Cisco IOS XR versions are affected by CVE-2006-1928?

CVE-2006-1928 affects Cisco IOS XR versions 3.0.1 through 3.2.3 on Cisco CRS-1 routers.

What is the impact of CVE-2006-1928 on network operations?

CVE-2006-1928 can lead to denial of service, causing Modular Services Cards to crash and impairing MPLS operations.

Are there known attacks exploiting CVE-2006-1928?

Yes, remote attackers can exploit CVE-2006-1928 by sending specially crafted MPLS packets to targeted Cisco devices.