CVE-2011-3282 — Cisco IOS vulnerability

4 documents4 sources
Severity
7.8HIGHNVD
EPSS
1.0%
top 23.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOSCisco IOS XE
Timeline
PublishedOct 3
Latest updateMay 17

Description

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device reload) via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/ios8 versions+7
▶NVDcisco/ios_xe29 versions+28

🔴Vulnerability Details

2
GHSA
GHSA-c7vj-9gxx-w84g: Unspecified vulnerability in Cisco IOS 12↗2022-05-17
▶
CVEList
CVE-2011-3282: Unspecified vulnerability in Cisco IOS 12↗2011-10-03
▶

📋Vendor Advisories

1
Cisco
Cisco IOS Software IP Version 6 over Multiprotocol Label Switching Vulnerabilities↗2011-09-28
▶
CVE-2011-3282 — Cisco IOS vulnerability | cvebase