CVE-2012-5723

Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 devices with software before 3.8S

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This can be achieved by sending crafted broadcast or multicast ICMP packets with fragmentation when BDI routing is enabled.

Recommendations For Cisco ASR 1000 devices with software before 3.8S, update to version 3.8S or later to resolve the issue. As a temporary workaround, consider disabling BDI routing to minimize the risk of exploitation. Restrict access to the device to prevent the sending of crafted ICMP packets.