VulnerabilityModified

CVE-2012-0381

The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service…

HIGH 7.5EPSS 3.81%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.81%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 3.81% probability · 89th percentile
CISA KEV: Not listed
Weakness: CWE-310
Affected: cisco/ios · cisco/ios xe
Source: psirt@cisco.com

References

http://osvdb.org/80700Broken Link
http://secunia.com/advisories/48605Not Applicable
http://secunia.com/advisories/48607Not Applicable
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ikeVendor Advisory
http://www.securityfocus.com/bid/52757Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026863Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74427Third Party Advisory, VDB Entry
http://osvdb.org/80700Broken Link
http://secunia.com/advisories/48605Not Applicable
http://secunia.com/advisories/48607Not Applicable
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ikeVendor Advisory
http://www.securityfocus.com/bid/52757Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026863Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74427Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.