Lucene search
K

4 matches found

NVD
NVD
added 2014/04/23 11:52 a.m.15 views

CVE-2012-5032

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

6.4CVSS6.8AI score0.00506EPSS
Exploits0References1
Prion
Prion
added 2014/04/23 11:52 a.m.9 views

Authentication flaw

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

6.4CVSS7.3AI score0.00506EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2014/04/23 10:0 a.m.21 views

CVE-2012-5032

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

6.8AI score0.00506EPSS
Exploits0References1
CVE
CVE
added 2014/04/23 10:0 a.m.41 views

CVE-2012-5032

The CVE-2012-5032 issue affects Cisco IOS with the Flex-VPN load-balancing feature in the ipsec-ikev2 implementation prior to 15.1(1)SY3. The root cause is that this feature does not require authentication, enabling an attacker to cause VPN traffic to be forwarded to an attacker-controlled destin...

6.4CVSS7AI score0.00506EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder