CVE-2011-3295

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.

Los procesos NETIO y IPV4_IO en Cisco IOS XR v3.8 hasta v4.1, como los utilizados en el sistema Cisco Carrier Routing System y otros productos, permite a atacantes remotos causar una denegación de servicio (consumo de CPU) a través de tráfico de la red manipulado, también conocido como Bug ID CSCti59888.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-08-29 CVE Reserved
2012-05-02 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (3)

URL	Tag	Source
http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7	X_refsource_confirm
http://www.securitytracker.com/id?1027005	Vdb Entry
http://www.securitytracker.com/id?1027006	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.8.0 Search vendor "Cisco" for product "Ios Xr" and version "3.8.0"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.8.1 Search vendor "Cisco" for product "Ios Xr" and version "3.8.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.8.2 Search vendor "Cisco" for product "Ios Xr" and version "3.8.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.8.3 Search vendor "Cisco" for product "Ios Xr" and version "3.8.3"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.8.4 Search vendor "Cisco" for product "Ios Xr" and version "3.8.4"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.9.0 Search vendor "Cisco" for product "Ios Xr" and version "3.9.0"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.9.1 Search vendor "Cisco" for product "Ios Xr" and version "3.9.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				3.9.2 Search vendor "Cisco" for product "Ios Xr" and version "3.9.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				4.0.0 Search vendor "Cisco" for product "Ios Xr" and version "4.0.0"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				4.0.1 Search vendor "Cisco" for product "Ios Xr" and version "4.0.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				4.0.2 Search vendor "Cisco" for product "Ios Xr" and version "4.0.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				4.0.3 Search vendor "Cisco" for product "Ios Xr" and version "4.0.3"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				4.0.4 Search vendor "Cisco" for product "Ios Xr" and version "4.0.4"		-		Affected
Cisco Search vendor "Cisco"		Ios Xr Search vendor "Cisco" for product "Ios Xr"				4.1 Search vendor "Cisco" for product "Ios Xr" and version "4.1"		-		Affected