[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjxIZILr8OwAG7aQRbRPy8unauvtb_UoqPtGZ54Fq8A0":3,"g5a-family:cisco\u002Fasr_1002_fixed_router":101,"g5a-ex:cisco\u002Fasr_1002_fixed_router@*":102},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":73,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","asr_1002_fixed_router",0,14,1,"2022-09-30",[],"Asr 1002 Fixed Router by Cisco is a technology product and 14 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,38,42,45,52,58,64,68],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2017-12231","A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper translation of H.323 messages that use the Registration, Admission, and Status (RAS) protocol and are sent to an affected device via IPv4 packets. An attacker could exploit this vulnerability by sending a crafted H.323 RAS packet through an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are configured to use an application layer gateway with NAT (NAT ALG) for H.323 RAS messages. By default, a NAT ALG is enabled for H.323 RAS messages. Cisco Bug IDs: CSCvc57217.","2017-09-29",7.5,"v3.1","High",0.0707,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":23,"isKev":31,"epssScore":32},"CVE-2013-2779","Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 MVPN (aka MVPNv6) packets, aka Bug ID CSCub34945, a different vulnerability than CVE-2013-1164.","2013-04-11",7.8,"v2",false,0.01962,{"cveId":34,"description":35,"publishedDate":28,"cvssScore":36,"cvssVersion":30,"severity":23,"isKev":31,"epssScore":37},"CVE-2013-1167","Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of service (card reload) via packets that are not properly handled during the processing of encapsulation, aka Bug ID CSCtt11558.",7.1,0.0196,{"cveId":39,"description":40,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":23,"isKev":31,"epssScore":41},"CVE-2013-1165","Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by sending many crafted L2TP packets, aka Bug ID CSCtz23293.",0.0189,{"cveId":43,"description":44,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":23,"isKev":31,"epssScore":41},"CVE-2013-1166","Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service (card reload) by sending many SIP packets, aka Bug ID CSCuc65609.",{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":30,"severity":50,"isKev":31,"epssScore":51},"CVE-2012-5017","Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268.","2014-04-23",6.8,"Medium",0.01536,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":30,"severity":50,"isKev":31,"epssScore":57},"CVE-2014-2183","The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.","2014-04-29",6.3,0.01319,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":30,"severity":50,"isKev":31,"epssScore":63},"CVE-2014-3284","Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.","2014-05-25",6.1,0.01207,{"cveId":65,"description":66,"publishedDate":12,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":67},"CVE-2022-20919","A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation during processing of CIP packets. An attacker could exploit this vulnerability by sending a malformed CIP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.",0.01199,{"cveId":69,"description":70,"publishedDate":12,"cvssScore":71,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":72},"CVE-2022-20851","A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI API. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. To exploit this vulnerability, an attacker must have valid Administrator privileges on the affected device.",7.2,0.01082,[74],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":75,"cisaDateAdded":76,"cisaShortDescription":77,"cisaRequiredAction":78},"Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","2022-03-03","A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.","Apply updates per vendor instructions.",{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Asr 1002 Fixed Router by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Asr 1002 Fixed Router by Cisco with 14 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Asr 1002 Fixed Router vulnerabilities, Asr 1002 Fixed Router security, Asr 1002 Fixed Router CVE, Cisco Asr 1002 Fixed Router, Asr 1002 Fixed Router threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Asr 1002 Fixed Router KEV, Asr 1002 Fixed Router exploited vulnerabilities",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","Asr 1002 Fixed Router","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fasr_1002_fixed_router",{"@type":89,"name":90,"url":91},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Asr 1002 Fixed Router Security Vulnerabilities","Security vulnerabilities affecting Asr 1002 Fixed Router by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":99,"apiVersion":100},"2026-10-19T01:33:51.325Z","3.0",[],{"rows":103,"total":11,"capped":31,"failed":9},[104],{"cveId":18,"name":75,"severity":23,"cvss":21,"added":76,"epss":24,"published":105,"ranges":106,"checked":4,"hits":107,"covers":31},"2017-09-29T01:34:48.747",[],[]]