CVE-2015-6273: Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembl...

Security readout for executives and security teams

This vulnerability can let a remote attacker crash the Embedded Services Processor on Cisco ASR 1000 routers running vulnerable IOS XE releases. The practical business risk is network disruption where affected routers carry production traffic, especially when firewall or NAT features trigger Virtual Fragment Reassembly behavior. Exposure is likely limited to Cisco ASR 1000 devices running IOS XE before 3.1.2S, particularly configurations using the relevant firewall or NAT components. The provided affected-product metadata is incomplete, so inventory confirmation is required. Treat this as a targeted network-availability risk. Prioritize validation on internet-facing or traffic-critical ASR 1000 routers before broader maintenance planning. Mitigation focus: Identify ASR 1000 devices running Cisco IOS XE earlier than 3.1.2S.; Review Cisco's advisory for fixed releases and upgrade guidance.; Prioritize routers where firewall or NAT features are enabled..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.