Lucene search
HistorySep 16, 2012 - 10:34 a.m.
CVE-2012-3924
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
43.8%
The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCty97961.
Affected configurations
Node
ciscoiosMatch15.1
ORciscoiosMatch15.2
Related
prion
prion
Design/Logic Flaw
2012-09-16 10:34:00
cvelist
cvelist
CVE-2012-3924
2012-09-16 10:00:00
cve
cve
CVE-2012-3924
2012-09-16 10:34:51
cisco
cisco
Cisco IOS SSL VPN Denial of Service Vulnerability
2012-10-03 18:10:34
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
43.8%
Related for NVD:CVE-2012-3924