Lucene search

K
cve[email protected]CVE-2011-1625
HistoryAug 18, 2011 - 6:55 p.m.

CVE-2011-1625

2011-08-1818:55:00
CWE-362
web.nvd.nist.gov
21
cisco
ios
dlsw
remote attackers
denial of service
malformed packets
device crash

6.4 Medium

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

50.0%

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a denial of service (device crash) by sending a sequence of malformed packets and leveraging a “narrow timing window,” aka Bug ID CSCtf74999, a different vulnerability than CVE-2007-0199, CVE-2008-1152, and CVE-2009-0629.

6.4 Medium

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

50.0%