CVE Vulnerabilities

CVE-2012-3923

Published: Sep 16, 2012 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.5 LOW
AV:N/AC:M/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827.

Affected Software

Name Vendor Start Version End Version
Ios Cisco 12.4 (including) 12.4 (including)
Ios Cisco 15.0 (including) 15.0 (including)
Ios Cisco 15.1 (including) 15.1 (including)
Ios Cisco 15.2 (including) 15.2 (including)

References