CVE-2014-2176: High severity Cisco IOS XR vulnerability

Published Jun 14, 2014

Updated

Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSCun71928.

Affected Software

22 affected components

Cisco IOS XR=4.1.2

Cisco IOS XR=4.2.0

Cisco IOS XR=4.3.1

Cisco IOS XR=5.1.0

Cisco IOS XR=5.1.1

Cisco Asr 9001

Cisco Asr 9006

Cisco Asr 9010

Cisco Asr 9904

Cisco Asr 9912

Cisco Asr 9922

All of the following

Any of the following

Cisco IOS XR=4.1.2

Cisco IOS XR=4.2.0

Cisco IOS XR=4.3.1

Cisco IOS XR=5.1.0

Cisco IOS XR=5.1.1

Any of the following

Cisco Asr 9001

Cisco Asr 9006

Cisco Asr 9010

Cisco Asr 9904

Cisco Asr 9912

Cisco Asr 9922

Event History

Jun 14, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Data Sourced

via NVD·11:18 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2176?

CVE-2014-2176 has been classified as a high severity vulnerability due to its ability to cause a denial of service.

How do I fix CVE-2014-2176?

To mitigate CVE-2014-2176, users should upgrade their Cisco IOS XR software to a version that is not affected, such as 5.1.2 or later.

Which devices are affected by CVE-2014-2176?

CVE-2014-2176 affects Cisco ASR 9000 series routers running specific versions of Cisco IOS XR software.

What type of attack does CVE-2014-2176 facilitate?

CVE-2014-2176 allows remote attackers to send malformed IPv6 packets that can lead to NP chip and line card reloads.

How can I determine if my device is vulnerable to CVE-2014-2176?

You can determine vulnerability to CVE-2014-2176 by checking your device's current IOS XR version against the affected versions listed in the advisory.