Lucene search

[email protected]CVE-2012-3923

HistorySep 16, 2012 - 10:34 a.m.

CVE-2012-3923

2012-09-1610:34:51

[email protected]

web.nvd.nist.gov

cisco

ios

sslvpn

denial of service

vulnerability

cve-2012-3923

nvd

cisco bug id cscte41827

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827.

Affected configurations

NVD

Node

ciscoiosMatch12.4

ciscoiosMatch15.0

ciscoiosMatch15.1

ciscoiosMatch15.2

CPENameOperatorVersion
cisco:ioscisco ioseq12.4
cisco:ioscisco ioseq15.0
cisco:ioscisco ioseq15.1
cisco:ioscisco ioseq15.2

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.4
cisco:ios	cisco ios	eq	15.0
cisco:ios	cisco ios	eq	15.1
cisco:ios	cisco ios	eq	15.2

References

www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html

exchange.xforce.ibmcloud.com/vulnerabilities/78670

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

Related for CVE-2012-3923

cvelist1 nvd1 prion1 cisco1