CVE-2012-0387
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.
Un fallo de gestión de memoria en el motor de inspección de HTTP en los Firewall basados en Zonas en Cisco IOS v12.4, v15.0, v15.1 y v15.2 permite a atacantes remotos causar una denegación de servicio (consumo de memoria o reinicio del dispositivo) a través de tráfico de de tránsito HTTP especificamente modificado para este fin. Se trata de un problema también conocido como Bug ID CSCtq36153.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-01-04 CVE Reserved
- 2012-03-29 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/80697 | Vdb Entry | |
| http://secunia.com/advisories/48608 | Third Party Advisory | |
| http://www.securityfocus.com/bid/52753 | Vdb Entry | |
| http://www.securitytracker.com/id?1026861 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/74435 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw | 2017-12-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.4 Search vendor "Cisco" for product "Ios" and version "12.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.0 Search vendor "Cisco" for product "Ios" and version "15.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.1 Search vendor "Cisco" for product "Ios" and version "15.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2 Search vendor "Cisco" for product "Ios" and version "15.2" | - |
Affected
| ||||||