PT-2012-5065 · Cisco · Cisco Ios

Published 2012-09-16 · Updated 2012-09-17 · CVE-2012-3893

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.2 through 15.3

Description The issue allows remote authenticated users to cause a denial of service, resulting in a spoke crash, via spoke-to-spoke traffic.

Recommendations For Cisco IOS versions 15.2 through 15.3, consider restricting spoke-to-spoke traffic as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2012-3893

Affected Products

Cisco Ios

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3893 · Security Note
• http://cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_4s.html · Note