CVE-2013-1165: Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Servi...

Security readout for executives and security teams

This vulnerability affects Cisco ASR 1000 routers running older IOS XE releases. A remote attacker could send crafted L2TP traffic in volume and cause a card reload, creating a denial of service. The sources do not provide CVSS scoring or evidence of active exploitation. Exposure is limited to Cisco 1000 Series Aggregation Services Routers running the vulnerable IOS XE trains. Risk is higher where L2TP traffic can reach the router from untrusted networks. Treat as a targeted infrastructure availability risk. It is most urgent for ASR 1000 routers supporting customer, WAN, or internet-edge traffic and still running the affected IOS XE versions. Mitigation focus: Upgrade affected IOS XE releases to Cisco-fixed versions or later.; Prioritize internet-facing or untrusted-network ASR 1000 routers.; Check Cisco advisory for any documented workarounds or deployment-specific guidance..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.