CVE-2012-2488: Input Validation
Published May 31, 2012
·Updated
Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593.
Affected Software
9 affected components
Cisco IOS XR<=4.2.0
Cisco Asr 9000 Rsp440 Router
Cisco IOS XR=4.0.3
Cisco IOS XR=4.0.4
Cisco IOS XR=4.1
Cisco IOS XR=4.1.1
Cisco IOS XR=4.1.2
Cisco IOS XR=4.2.0
Cisco Crs Performance Route Processor
Event History
May 31, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What are the potential impacts of CVE-2012-2488?
CVE-2012-2488 can cause a denial of service, resulting in packet transmission outages on affected Cisco devices.
2
Which Cisco devices are affected by CVE-2012-2488?
CVE-2012-2488 affects Cisco IOS XR versions before 4.2.1 on ASR 9000 series and CRS series devices.
3
Is CVE-2012-2488 remotely exploitable?
Yes, CVE-2012-2488 can be exploited remotely by attackers sending crafted packets.
4
How can I mitigate CVE-2012-2488?
Mitigation for CVE-2012-2488 involves upgrading affected Cisco IOS XR devices to version 4.2.1 or later.
5
What vulnerabilities are associated with CVE-2012-2488?
CVE-2012-2488 is associated with Bug IDs CSCty94537 and CSCtz62593.