CVE-2012-5017

Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268.

Score

CVSS 2.0 6.8 Medium

Status

Modified - psirt@cisco.com

Published

2014-04-23

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Asr 1001 (Cisco)
• Asr 1002 (Cisco)
• Asr 1002-x (Cisco)
• Asr 1002 Fixed Router (Cisco)
• Asr 1004 (Cisco)
• Asr 1006 (Cisco)
• Asr 1023 Router (Cisco)
• Ios (Cisco)

References

• http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf