PT-2011-1005 · Cisco · Cisco Ios+1

Published 2011-09-28 · Updated 2012-05-14 · CVE-2011-3282

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SRE before 12.2(33)SRE4 Cisco IOS versions 15.0 and 15.1 Cisco IOS XE versions 2.1.x through 3.3.x

Description The issue allows remote attackers to cause a denial of service (device reload) via an ICMPv6 packet, related to an expired MPLS TTL, when an MPLS domain is configured. This can be exploited by sending specially crafted packets over a Multiprotocol Label Switching (MPLS) domain, causing the device to reload.

Recommendations For Cisco IOS versions 12.2SRE before 12.2(33)SRE4, update to version 12.2(33)SRE4 or later. For Cisco IOS versions 15.0 and 15.1, apply the software updates released by Cisco that address these vulnerabilities. For Cisco IOS XE versions 2.1.x through 3.3.x, apply the software updates released by Cisco that address these vulnerabilities. As a temporary workaround, consider restricting access to the MPLS domain to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2014-00027

CVE-2011-3282

Affected Products

Cisco Ios

Cisco Ios Xe

References · 6

• https://bdu.fstec.ru/vul/2014-00027 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b95d52.shtml · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-ipv6mpls · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3282 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=24126 · Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-ipv6mpls · Note