CVE-2012-4617

2012-09-2700:55:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

ios

ios xe

ios xr

bgp

denial of service

vulnerability

cve-2012-4617

nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

JSON

The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection resets) by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248, and CSCtz62914.

Affected configurations

NVD

Node

ciscoiosMatch15.2

ciscoios_xeMatch3.5.0s

ciscoios_xeMatch3.5.1s

ciscoios_xrMatch4.1

ciscoios_xrMatch4.1.1

ciscoios_xrMatch4.1.2

ciscoios_xrMatch4.2.0

ciscoios_xrMatch4.2.1

ciscoios_xrMatch4.2.2

CPENameOperatorVersion
cisco:ioscisco ioseq15.2
cisco:ios_xecisco ios xeeq3.5.0s
cisco:ios_xecisco ios xeeq3.5.1s
cisco:ios_xrcisco ios xreq4.1
cisco:ios_xrcisco ios xreq4.1.1
cisco:ios_xrcisco ios xreq4.1.2
cisco:ios_xrcisco ios xreq4.2.0
cisco:ios_xrcisco ios xreq4.2.1
cisco:ios_xrcisco ios xreq4.2.2

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	15.2
cisco:ios_xe	cisco ios xe	eq	3.5.0s
cisco:ios_xe	cisco ios xe	eq	3.5.1s
cisco:ios_xr	cisco ios xr	eq	4.1
cisco:ios_xr	cisco ios xr	eq	4.1.1
cisco:ios_xr	cisco ios xr	eq	4.1.2
cisco:ios_xr	cisco ios xr	eq	4.2.0
cisco:ios_xr	cisco ios xr	eq	4.2.1
cisco:ios_xr	cisco ios xr	eq	4.2.2