Lucene search
HistoryMay 02, 2012 - 10:09 a.m.
CVE-2011-4007
cisco
ios
ios xe
denial of service
vulnerability
remote attackers
network traffic
fragmentation
reassembly
bug id
csctr56576
CVSS2
5.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
58.5%
Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the “set mpls experimental imposition” command, which allows remote attackers to cause a denial of service (device crash) via network traffic that triggers (1) fragmentation or (2) reassembly, aka Bug ID CSCtr56576.
Affected configurations
Node
ciscoiosMatch15.0
ORciscoiosMatch15.1
ORciscoios_xeMatch3.1.0s
ORciscoios_xeMatch3.1.0sg
ORciscoios_xeMatch3.1.1s
ORciscoios_xeMatch3.1.1sg
ORciscoios_xeMatch3.1.2s
ORciscoios_xeMatch3.1.3s
ORciscoios_xeMatch3.1.4s
ORciscoios_xeMatch3.2.0s
ORciscoios_xeMatch3.2.0sg
ORciscoios_xeMatch3.2.1s
ORciscoios_xeMatch3.2.1sg
ORciscoios_xeMatch3.2.2s
ORciscoios_xeMatch3.3.0s
ORciscoios_xeMatch3.3.1s
ORciscoios_xeMatch3.3.2s
ORciscoios_xeMatch3.3.3s
ORciscoios_xeMatch3.4.0s
ORciscoios_xeMatch3.4.1s
ORciscoios_xeMatch3.5.0s
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios | 15.0 | cpe:2.3:o:cisco:ios:15.0:*:*:*:*:*:*:* |
| cisco | ios | 15.1 | cpe:2.3:o:cisco:ios:15.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.1.0s | cpe:2.3:o:cisco:ios_xe:3.1.0s:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.1.0sg | cpe:2.3:o:cisco:ios_xe:3.1.0sg:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.1.1s | cpe:2.3:o:cisco:ios_xe:3.1.1s:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.1.1sg | cpe:2.3:o:cisco:ios_xe:3.1.1sg:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.1.2s | cpe:2.3:o:cisco:ios_xe:3.1.2s:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.1.3s | cpe:2.3:o:cisco:ios_xe:3.1.3s:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.1.4s | cpe:2.3:o:cisco:ios_xe:3.1.4s:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.2.0s | cpe:2.3:o:cisco:ios_xe:3.2.0s:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2011-4007
2012-05-02 10:09:21
cvelist
cvelist
CVE-2011-4007
2012-05-02 10:00:00
prion
prion
Command injection
2012-05-02 10:09:00
CVSS2
5.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
58.5%
Related for NVD:CVE-2011-4007