PT-2012-3189 · Cisco · Cisco Ios

Published 2012-05-03 · Updated 2017-12-07 · CVE-2012-1324

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2

Description A race condition in the Zone-Based Firewall allows remote attackers to cause a denial of service by sending IPv6 packets when IPS policies are configured.

Recommendations For Cisco IOS versions 15.1 through 15.2, consider disabling IPS policies as a temporary workaround until a patch is available. Restrict access to the Zone-Based Firewall to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2012-1324

Affected Products

Cisco Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-1324 · Security Note
• http://cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75414 · Note