PT-2012-3189 · Cisco · Cisco Ios

Publicado 2012-05-03 · Atualizado 2017-12-07 · CVE-2012-1324

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2

Description A race condition in the Zone-Based Firewall allows remote attackers to cause a denial of service by sending IPv6 packets when IPS policies are configured.

Recommendations For Cisco IOS versions 15.1 through 15.2, consider disabling IPS policies as a temporary workaround until a patch is available. Restrict access to the Zone-Based Firewall to minimize the risk of exploitation.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2012-1324

Produtos afetados

Cisco Ios

Referências · 3

• http://cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75414 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1324 · Nota de Segurança