CVE-2006-1928 json
Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to caus…
published 2006-04-20 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1928
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.9%
- EPSS 1.9% chance of exploitation in 30 days, percentile 79%
- public exploits
- 0
- none known
Summary
Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or "MPLS packet handling problems") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531.
Exploit prediction
1.86% chance of exploitation in the next 30 days, higher than 79% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Classification
- Technology feeds
References
-
cisco.com
/warp/public/707/cisco-sa-20060419-xr.shtml
vendor-advisory
-
vupen.com
/english/advisories/2006/1433
vdb-entry
-
securitytracker.com
/id?1015964
vdb-entry
-
securityfocus.com
/bid/17607
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25881
vdb-entry
-
secunia.com
/advisories/19740
third-party-advisory
-
osvdb.org
/24811
vdb-entry
Sources
- CVE List CVE-2006-1928
- NVD CVE-2006-1928
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.