CVE-2013-2779: Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Rout...

Security readout for executives and security teams

This Cisco IOS XE issue can let a remote attacker crash a card on affected ASR 1000 routers using fragmented IPv6 MVPN traffic. The business impact is service disruption, not data theft, based on the provided sources. Exposure appears limited to old IOS XE releases and relevant multicast VPN deployments. Likely exposure is Cisco ASR 1000 Series routers running the named old IOS XE trains, especially where IPv6 MVPN traffic can reach the device. The bundle does not provide CPEs, CVSS, or broader affected-product evidence. Treat this as a targeted availability risk for legacy Cisco ASR routing infrastructure. Prioritize remediation if affected routers support customer, branch, or provider services where card reloads could disrupt connectivity. Mitigation focus: Upgrade affected IOS XE 3.4 systems to 3.4.5S or later.; Upgrade affected IOS XE 3.5 through 3.7 systems to 3.7.1S or later.; Review Cisco advisory guidance before changing production routers..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.