PT-2012-3207 · Cisco · Cisco Ios

Publicado 2012-08-06 · Atualizado 2012-08-06 · CVE-2012-1367

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.2, 15.0 through 15.1, and 15.2

Description The issue allows remote attackers to cause a denial of service, resulting in a Route Processor crash. This can be achieved via a BGP UPDATE message with a modified local-preference attribute length.

Recommendations For Cisco IOS versions 12.0 through 12.2, update to a version that includes the fix for Bug ID CSCtq06538. For Cisco IOS versions 15.0 through 15.1, update to a version that includes the fix for Bug ID CSCtq06538. For Cisco IOS version 15.2, update to a version that includes the fix for Bug ID CSCtq06538. As a temporary workaround, consider restricting BGP UPDATE messages to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-1367

Produtos afetados

Cisco Ios

Referências · 2

• 🔥 http://cisco.com/en/US/docs/ios/12_2sr/release/notes/122SRcavs1.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1367 · Nota de Segurança