CVE-2012-1342

MEDIUM

Cisco Carrier Routing System 3.9-4.1 - Incorrect Authorization via Fragmented Packet Bypass

Title source: llm

Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975.

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 5.8

EPSS 0.0150

EPSS Percentile 71.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE

CWE-863

Status published

Products (3)

cisco/carrier_routing_system 3.9.0

cisco/carrier_routing_system 4.0.0

cisco/carrier_routing_system 4.1.0

Published Aug 06, 2012

Tracked Since Feb 18, 2026