Unscored severity · published May 2, 2012
CVE-2011-3295
The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IX
Ios XR · Cisco
3.8.0; 3.8.1; 3.8.2; 3.8.3; 3.8.4; 3.9.0; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3295
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3295
www-europe.cisco.com
http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7
www.securitytracker.com
http://www.securitytracker.com/id?1027005
www.securitytracker.com
http://www.securitytracker.com/id?1027006
More from Ios XR
8.8
CVE-2020-3118
Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
8.8
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
8.6
CVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
8.6
CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
8.0
CVE-2018-0175
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability