CVE:CVE-2013-1167
CNNVD:CNNVD-201304-186
Cisco IOS是美国思科（Cisco）公司为其网络设备开发的操作系统。
Cisco 1000系列Aggregation Services Routers（ASR）中的Cisco IOS XE存在拒绝服务漏洞。当启用了桥接域接口（BDI）时，通过发送未正确封装的数据包，攻击者能够利用该漏洞造成拒绝服务（card 重载）。Cisco IOS XE 3.4.2S之前的3.2至3.4版本，以及3.5版本中存在此漏洞。
solution:Upgrade cisco ios_xe to a higher version than 3.2.00.xo.15.0(2xo,3.2.0s,3.2.0sg,3.2.0xo,3.2.1s,3.2.1sg,3.2.2s,3.2.2sg,3.2.3sg,3.2.4sg,3.3.0s,3.3.0sg,3.3.1s,3.3.1sg,3.3.2s,3.3.3s,3.4.0as,3.4.0s,3.4.1s,3.5.0s,3.5.1s,3.5.2s,3.5.xs,and avoid the version 3.2.00.xo.15.0(2)xo,3.2.0s,3.2.0sg,3.2.0xo,3.2.1s,3.2.1sg,3.2.2s,3.2.2sg,3.2.3sg,3.2.4sg,3.3.0s,3.3.0sg,3.3.1s,3.3.1sg,3.3.2s,3.3.3s,3.4.0as,3.4.0s,3.4.1s,3.5.0s,3.5.1s,3.5.2s,3.5.xs; Upgrade cisco asr_1001 to a higher version than -; Upgrade cisco asr_1002 to a higher version than -; Upgrade cisco asr_1002-x to a higher version than -; Upgrade cisco asr_1002_fixed_router to a higher version than -; Upgrade cisco asr_1004 to a higher version than -; Upgrade cisco asr_1006 to a higher version than -; Upgrade cisco asr_1013 to a higher version than -; Upgrade cisco asr_1023_router to a higher version than -