CVE-2011-0939 — Cisco IOS vulnerability

4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.4%
top 41.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOSCisco IOS XE
Timeline
PublishedOct 3
Latest updateMay 17

Description

Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (device reload) via a crafted SIP message, aka Bug ID CSCth03022.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/ios12.4, 15.0, 15.1+2
▶NVDcisco/ios_xe14 versions+13

🔴Vulnerability Details

2
GHSA
GHSA-22pg-r6fg-6256: Unspecified vulnerability in Cisco IOS 12↗2022-05-17
▶
CVEList
CVE-2011-0939: Unspecified vulnerability in Cisco IOS 12↗2011-10-03
▶

📋Vendor Advisories

1
Cisco
Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities↗2011-09-28
▶
CVE-2011-0939 — Cisco IOS vulnerability | cvebase