CVE-2012-0381

high-risk
Published 2012-03-29

The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCts38429.

Do I need to act?

~
3.5% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios

Affected Vendors

Cisco

References (14)

Broken Link http://osvdb.org/80700
Not Applicable http://secunia.com/advisories/48605
Not Applicable http://secunia.com/advisories/48607
Vendor Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...
Third Party Advisory http://www.securityfocus.com/bid/52757
Third Party Advisory http://www.securitytracker.com/id?1026863
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/74427
Broken Link http://osvdb.org/80700
Not Applicable http://secunia.com/advisories/48605
Not Applicable http://secunia.com/advisories/48607
Vendor Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...
Third Party Advisory http://www.securityfocus.com/bid/52757
Third Party Advisory http://www.securitytracker.com/id?1026863
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/74427
66
/ 100
high-risk
Severity 26/34 · High
Exploitability 7/34 · Low
Exposure 33/34 · Critical