CVE-2013-1167: Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), whe...

Security readout for executives and security teams

This vulnerability can make affected Cisco ASR 1000 routers reload a card when they process certain encapsulated traffic with BDI enabled. The business impact is network disruption, not data theft. Exposure depends on running the listed IOS XE versions and using bridge domain interfaces. Likely limited to Cisco ASR 1000 deployments running the named IOS XE versions with bridge domain interface enabled. Internet-edge, provider-edge, or aggregation routers carrying customer or site traffic would have higher business exposure. Prioritize remediation for production ASR 1000 routers that support critical connectivity. Treat this as an availability risk: a successful attack could interrupt routing services, but the provided evidence does not indicate data compromise or known active exploitation. Mitigation focus: Inventory Cisco ASR 1000 routers and IOS XE versions.; Identify devices with bridge domain interface enabled.; Review Cisco advisory cisco-sa-20130410-asr1000 for fixed software guidance..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.