Unscored severity · published Apr 23, 2014
CVE-2012-1366
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A1
Asr 1001 · Cisco
All versions, or not specified · source: NVD
A1
Asr 1002 · Cisco
All versions, or not specified · source: NVD
A1
Asr 1002 Fixed Router · Cisco
All versions, or not specified · source: NVD
A1
Asr 1002-x · Cisco
All versions, or not specified · source: NVD
A1
Asr 1004 · Cisco
All versions, or not specified · source: NVD
A1
Asr 1006 · Cisco
All versions, or not specified · source: NVD
A1
Asr 1013 · Cisco
All versions, or not specified · source: NVD
A1
Asr 1023 Router · Cisco
All versions, or not specified · source: NVD
A9
Asr 9000 Rsp440 Router · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
15.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1366
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1366
www.cisco.com
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
More from Asr 1001
–
CVE-2014-3284
Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID…
–
CVE-2014-2183
The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP…
–
CVE-2012-5723
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2)…
–
CVE-2012-5017
Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets,…
–
CVE-2013-5547
Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malformed EoGRE packets over (1) IPv4 or (2)…