PT-2012-3190 · Apple+1 · Iphone+2

Published 2012-05-03 · Updated 2017-12-07 · CVE-2012-1327

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 15.1

Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and reboot, via 802.11 wireless traffic. This can be demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S.

Recommendations For Cisco IOS versions 12.3 through 15.1, update to a version that contains a fix for this issue to prevent remote attackers from causing a denial of service.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2012-1327

Affected Products

Ios

Cisco Ios

Iphone

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-1327 · Security Note
• http://cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75413 · Note