CVE-2001-0863

CVE-2001-0863 describes a denial-of-service vulnerability in Cisco 12000 routers running IOS 12.0 with Engine 2 line cards. The flaw stems from the router's inability to correctly process the "fragment" keyword in compiled Access Control Lists (Turbo ACLs) for packets destined for the router itself. An attacker can exploit this by sending a flood of fragmented packets, leading to a denial of service. This vulnerability is rated Medium severity with a CVSS score of 5.0. It is network-exploitable with low attack complexity and requires no authentication, but its impact is limited to availability (A:P). There is no evidence of active exploitation, and no public exploit code is available through Metasploit, Nuclei, or ExploitDB. The vulnerability has received no community discussion or media coverage, indicating a low level of public awareness and interest.