Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0688
Reference (s):
- CISCO:20150403 Cisco ASR1000 Series Routers ESP Module Denial of Service Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38210
- SECTRACK:1032023
- URL: http://www.securitytracker.com/id/1032023