var-201404-0063
Vulnerability from variot
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. IOS is prone to a denial-of-service vulnerability. A security vulnerability exists in Cisco IOS Release 15.1(1) on ASR 1000 devices
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201404-0063", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "ios", "scope": "eq", "trust": 2.5, "vendor": "cisco", "version": "15.1" }, { "model": "asr 1002-x", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 9000 rsp440 router", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1013", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1002 fixed router", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1006", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1002", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1023 router", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1004", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1001", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "asr 1001 router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 1002 fixed router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 1002 router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 1002-x router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 1004 router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 1006 router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 1013 router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 1023 router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "asr 9000 series rsp440", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "ios", "scope": "lt", "trust": 0.8, "vendor": "cisco", "version": "15.1(1)sy" }, { "model": "asr router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "1001" }, { "model": "asr router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "1002-x" }, { "model": "asr fixed router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "1002" }, { "model": "asr router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "1002" }, { "model": "asr router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "1004" }, { "model": "asr router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "1006" }, { "model": "asr router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "1023" }, { "model": "asr rsp440 router", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "9000" }, { "model": "asr rsp440 router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "9000-" }, { "model": "asr router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1023-" }, { "model": "asr router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1013-" }, { "model": "asr router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1006-" }, { "model": "asr router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1004-" }, { "model": "asr router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1002-x-" }, { "model": "asr router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1002-" }, { "model": "asr fixed router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1002-" }, { "model": "asr router", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1001-" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "BID", "id": "78241" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "NVD", "id": "CVE-2012-1366" }, { "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:cisco:ios:15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_1002_fixed_router:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_1023_router:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:h:cisco:asr_9000_rsp440_router:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2012-1366" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Unknown", "sources": [ { "db": "BID", "id": "78241" } ], "trust": 0.3 }, "cve": "CVE-2012-1366", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "exploitabilityScore": 6.5, "impactScore": 6.9, "integrityImpact": "NONE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Adjacent Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 6.1, "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2012-1366", "impactScore": null, "integrityImpact": "None", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "Medium", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "exploitabilityScore": 6.5, "id": "CNVD-2014-02643", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "exploitabilityScore": 6.5, "id": "VHN-54647", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:A/AC:L/AU:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "NVD", "id": "CVE-2012-1366", "trust": 1.8, "value": "MEDIUM" }, { "author": "CNVD", "id": "CNVD-2014-02643", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201404-448", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-54647", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "VULHUB", "id": "VHN-54647" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "NVD", "id": "CVE-2012-1366" }, { "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. IOS is prone to a denial-of-service vulnerability. A security vulnerability exists in Cisco IOS Release 15.1(1) on ASR 1000 devices", "sources": [ { "db": "NVD", "id": "CVE-2012-1366" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "BID", "id": "78241" }, { "db": "VULHUB", "id": "VHN-54647" } ], "trust": 2.52 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2012-1366", "trust": 3.4 }, { "db": "JVNDB", "id": "JVNDB-2012-006192", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201404-448", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2014-02643", "trust": 0.6 }, { "db": "BID", "id": "78241", "trust": 0.4 }, { "db": "VULHUB", "id": "VHN-54647", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "VULHUB", "id": "VHN-54647" }, { "db": "BID", "id": "78241" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "NVD", "id": "CVE-2012-1366" }, { "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "id": "VAR-201404-0063", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "VULHUB", "id": "VHN-54647" } ], "trust": 1.3722222333333334 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-02643" } ] }, "last_update_date": "2023-12-18T12:30:46.287000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Release Notes for Cisco IOS Release 15.1SY", "trust": 0.8, "url": "http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1sy/release_notes.pdf" }, { "title": "Patch for Cisco IOS Denial of Service Vulnerability (CNVD-2014-02643)", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/45176" }, { "title": "Cisco IOS on ASR 1000 devices Enter the fix for the verification error vulnerability", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=164609" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-20", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-54647" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "NVD", "id": "CVE-2012-1366" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.6, "url": "http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1sy/release_notes.pdf" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-1366" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-1366" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "VULHUB", "id": "VHN-54647" }, { "db": "BID", "id": "78241" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "NVD", "id": "CVE-2012-1366" }, { "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2014-02643" }, { "db": "VULHUB", "id": "VHN-54647" }, { "db": "BID", "id": "78241" }, { "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "db": "NVD", "id": "CVE-2012-1366" }, { "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2014-04-25T00:00:00", "db": "CNVD", "id": "CNVD-2014-02643" }, { "date": "2014-04-23T00:00:00", "db": "VULHUB", "id": "VHN-54647" }, { "date": "2014-04-23T00:00:00", "db": "BID", "id": "78241" }, { "date": "2014-04-24T00:00:00", "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "date": "2014-04-23T11:52:59.010000", "db": "NVD", "id": "CVE-2012-1366" }, { "date": "2014-04-25T00:00:00", "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2014-04-25T00:00:00", "db": "CNVD", "id": "CNVD-2014-02643" }, { "date": "2014-04-23T00:00:00", "db": "VULHUB", "id": "VHN-54647" }, { "date": "2014-04-23T00:00:00", "db": "BID", "id": "78241" }, { "date": "2014-04-24T00:00:00", "db": "JVNDB", "id": "JVNDB-2012-006192" }, { "date": "2021-10-05T14:51:27.063000", "db": "NVD", "id": "CVE-2012-1366" }, { "date": "2021-10-08T00:00:00", "db": "CNNVD", "id": "CNNVD-201404-448" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "specific network environment", "sources": [ { "db": "CNNVD", "id": "CNNVD-201404-448" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "ASR 1000 Run on device Cisco IOS Service disruption in (DoS) Vulnerabilities", "sources": [ { "db": "JVNDB", "id": "JVNDB-2012-006192" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Input Validation Error", "sources": [ { "db": "BID", "id": "78241" }, { "db": "CNNVD", "id": "CNNVD-201404-448" } ], "trust": 0.9 } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.