PT-2014-2282 · Cisco · Cisco Ios

Published 2014-04-23 · Updated 2014-04-23 · CVE-2012-4651

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.3(2)T

Description The issue allows remote attackers to cause a denial of service, resulting in latency, via SYN packets that are not accompanied by SYN-ACK packets from the Scan Safe Tower.

Recommendations For versions prior to 15.3(2)T, update to version 15.3(2)T or later to resolve the issue. As a temporary workaround, consider disabling the scansafe feature until a patch is available.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2012-4651

Affected Products

Cisco Ios

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-4651 · Security Note
• http://cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf · Note