Lucene search

K
cve[email protected]CVE-2012-0386
HistoryMar 29, 2012 - 11:01 a.m.

CVE-2012-0386

2012-03-2911:01:16
CWE-310
web.nvd.nist.gov
34
cisco
ios
sshv2
vulnerability
denial of service
cve-2012-0386
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.

Affected configurations

NVD
Node
ciscoiosMatch12.2
OR
ciscoiosMatch12.4
OR
ciscoiosMatch15.0
OR
ciscoiosMatch15.1
OR
ciscoiosMatch15.2
Node
ciscoios_xeMatch2.3
OR
ciscoios_xeMatch2.3.0
OR
ciscoios_xeMatch2.3.1
OR
ciscoios_xeMatch2.3.1t
OR
ciscoios_xeMatch2.3.2
OR
ciscoios_xeMatch2.4
OR
ciscoios_xeMatch2.4.0
OR
ciscoios_xeMatch2.4.1
OR
ciscoios_xeMatch2.4.2
OR
ciscoios_xeMatch2.4.3
OR
ciscoios_xeMatch2.4.4
OR
ciscoios_xeMatch2.5.0
OR
ciscoios_xeMatch2.5.1
OR
ciscoios_xeMatch2.5.2
OR
ciscoios_xeMatch2.6.0
OR
ciscoios_xeMatch2.6.1
OR
ciscoios_xeMatch2.6.2
OR
ciscoios_xeMatch3.1.0s
OR
ciscoios_xeMatch3.1.0sg
OR
ciscoios_xeMatch3.1.1s
OR
ciscoios_xeMatch3.1.1sg
OR
ciscoios_xeMatch3.1.2s
OR
ciscoios_xeMatch3.1.3s
OR
ciscoios_xeMatch3.1.4s
OR
ciscoios_xeMatch3.2.0s
OR
ciscoios_xeMatch3.2.1s
OR
ciscoios_xeMatch3.2.2s
OR
ciscoios_xeMatch3.3.0s
OR
ciscoios_xeMatch3.4.0s

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%