CVE-2011-4015 — Improper Input Validation in Cisco IOS

CWE-20 — Improper Input Validation5 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 35.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS
Timeline
PublishedMay 2
Latest updateMay 17

Description

Cisco IOS 15.2S allows remote attackers to cause a denial of service (interface queue wedge) via malformed UDP traffic on port 465, aka Bug ID CSCts48300.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDcisco/ios15.2s

🔴Vulnerability Details

2
GHSA
GHSA-gf8w-w5qv-q4hp: Cisco IOS 15↗2022-05-17
▶
CVEList
CVE-2011-4015: Cisco IOS 15↗2012-05-02
▶

💬Community

2
Bugzilla
CVE-2011-5027 zabbix: Multiple cross-site scripting (XSS) vulnerabilities fixed in 1.8.10↗2011-12-30
▶
Bugzilla
CVE-2011-4615 zabbix: persistent XSS flaws in 1.8.x↗2011-12-16
▶
CVE-2011-4015 — Improper Input Validation in Cisco IOS | cvebase