The network equipment supplier Cisco has closed a security gap in routers of the ASR – 9000 – series.

Admins should update their Cisco ASR Series Aggregation Services Router for security reasons. Otherwise, attackers could paralyze devices using a DoS attack.

The vulnerability (CVE – 2020 – 26070 ) can be found in the IOS XR network operating system. It is classified with the threat level ” high “. Due to an error, the system is having problems processing Layer 2 or Layer 3 PDU packets.

By sending specially crafted packets, remote attackers without authentication could lead routers to stop processing traffic. This should only work again after a restart, Cisco issues a warning message.

The network supplier has identified the security gap in the IOS XR versions 6.7.2 and 7.1.2 closed. Routers with more recent editions are vulnerable.

(des)