PT-2012-5073 · Cisco · Cisco Ios

Published 2012-09-16 · Updated 2017-08-29 · CVE-2012-3924

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2

Description The issue is related to the SSLVPN implementation when DTLS is enabled, which does not properly handle certain outbound ACL configurations. This allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface. An authenticated, remote attacker could exploit this by sending a series of malicious packets via an SSL VPN session that terminates over a PPP over ATM (PPPoA) interface of a targeted device. Successful exploitation could allow the attacker to cause the affected device to crash, resulting in a denial of service condition. A successful exploit could allow an attacker to cause a device to stop responding, which could prevent authorized users from accessing network resources served by the targeted device.

Recommendations For Cisco IOS versions 15.1 through 15.2, update to a fixed software version to resolve the issue. As a temporary workaround, consider restricting access to the SSL VPN component until a patch is available. Avoid using the PPP over ATM (PPPoA) interface in the affected SSL VPN sessions until the issue is resolved.

Fix

Related Identifiers

CVE-2012-3924

Affected Products

Cisco Ios

References · 4

• http://cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3924 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78672 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20121003-CVE-2012-3923 · Note