CVE-2013-5549: Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, a...

Security readout for executives and security teams

CVE-2013-5549 affects Cisco IOS XR versions 3.8.1 through 4.2.0. A remote attacker could trigger a denial of service against certain route-processor components by sending fragmented IPv4 or IPv6 traffic, potentially causing a transmission outage. The bundle does not provide CVSS scoring or confirmed fix details. Exposure is likely limited to organizations running affected Cisco IOS XR versions on the named route-processor components, especially where IPv4 or IPv6 fragmented traffic can reach those systems. The bundle does not identify specific device models or deployment conditions. Treat this as a high-priority infrastructure resilience issue if affected Cisco IOS XR routers remain in service. The business risk is service interruption, not data theft. Remediation priority depends on whether affected versions and route processors are still deployed and reachable by untrusted traffic. Mitigation focus: Inventory Cisco IOS XR versions 3.8.1 through 4.2.0.; Check Cisco advisory guidance for fixed software or supported mitigations.; Prioritize affected routing infrastructure with external traffic exposure..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.