Unscored severity · published Oct 22, 2011
CVE-2011-2059
The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop (HBH) extension header (EH) with a 0x0c01050c value in the PadN option data, aka Bug ID CSCtq02219.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
Ios · Cisco
before 15.1\(4\)m1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2059
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2059
Broken Link
http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor
Vendor Advisory
http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0
More from Ios
9.8
CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
9.8
CVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
9.8
CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
8.8
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
8.8
CVE-2017-6736
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability