CVE-2012-0382

high-risk
Published 2012-03-29

The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet, aka Bug ID CSCtr28857.

Do I need to act?

~
4.5% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios
Ios

Affected Vendors

Cisco

References (14)

Broken Link http://osvdb.org/80693
Not Applicable http://secunia.com/advisories/48630
Not Applicable http://secunia.com/advisories/48633
Vendor Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...
Third Party Advisory http://www.securityfocus.com/bid/52759
Third Party Advisory http://www.securitytracker.com/id?1026868
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/74431
Broken Link http://osvdb.org/80693
Not Applicable http://secunia.com/advisories/48630
Not Applicable http://secunia.com/advisories/48633
Vendor Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...
Third Party Advisory http://www.securityfocus.com/bid/52759
Third Party Advisory http://www.securitytracker.com/id?1026868
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/74431
67
/ 100
high-risk
Severity 26/34 · High
Exploitability 8/34 · Low
Exposure 33/34 · Critical