Lucene search

K
cve[email protected]CVE-2012-1311
HistoryMar 29, 2012 - 11:01 a.m.

CVE-2012-1311

2012-03-2911:01:16
CWE-399
web.nvd.nist.gov
25
cisco
ios
ios xe
rsvp feature
denial of service
vulnerability
cve-2012-1311
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge and service outage) via crafted RSVP packets, aka Bug ID CSCts80643.

Affected configurations

NVD
Node
ciscoiosMatch15.0
OR
ciscoiosMatch15.1
Node
ciscoios_xeMatch3.2.0s
OR
ciscoios_xeMatch3.2.1s
OR
ciscoios_xeMatch3.2.2s
OR
ciscoios_xeMatch3.3.0s
OR
ciscoios_xeMatch3.4.0s

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%