CVE-2012-0386
published 2012-03-29CVE-2012-0386: The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.12%
86.4th percentile
The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Software Reverse SSH Denial of Service Vulnerability
vendor_cisco·2012-03-28·CVSS 7.8
CVE-2012-0386 [HIGH] Cisco IOS Software Reverse SSH Denial of Service Vulnerability
Cisco IOS Software Reverse SSH Denial of Service Vulnerability
The Secure Shell (SSH) server implementation in Cisco IOS Software and Cisco IOS XE Software contains a denial of service (DoS) vulnerability in the SSH version 2 (SSHv2) feature. An unauthenticated, remote attacker could exploit this vulnerability by attempting a reverse SSH login with a crafted username. Successful exploitation of this vulnerability could allow an attacker to create a DoS condition by causing the device to reload. Repeated exploits could create a sustained DoS condition.
The SSH server in Cisco IOS Software and Cisco IOS XE Software is an optional service, but its use is highly recommended as a security best practice for the management of Cisco IOS devices. Devices that are not configured to accept SSHv2
Cisco
Cisco IOS Software Reverse SSH Denial of Service Vulnerability
vendor_cisco
CVE-2012-0386 Cisco IOS Software Reverse SSH Denial of Service Vulnerability
CVE-2012-0386: Cisco IOS Software Reverse SSH Denial of Service Vulnerability
The Secure Shell (SSH) server implementation in Cisco IOS Software and Cisco IOS XE Software contains a denial of service (DoS) vulnerability in the SSH version 2 (SSHv2) feature. An unauthenticated, remote attacker could exploit this vulnerability by attempting a reverse SSH login with a crafted username. Successful exploitation of this vulnerability could allow an attacker to create a DoS condition by causing the device to reload. Repeated exploits could create a sustained DoS condition. The SSH server in Cisco IOS Software and Cisco IOS XE Software is an optional service, but its use is highly recommended as a security best practice for the management of Cisco IOS devices. Devices that are not configured to ac
GHSA
GHSA-9hf6-wfwp-jr92: The SSHv2 implementation in Cisco IOS 12
ghsa_unreviewed·2022-05-04
CVE-2012-0386 [HIGH] GHSA-9hf6-wfwp-jr92: The SSHv2 implementation in Cisco IOS 12
The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.
No detection rules found.
No public exploits indexed.
http://osvdb.org/80695http://secunia.com/advisories/48609http://secunia.com/advisories/48641http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-sshhttp://www.securityfocus.com/bid/52752http://www.securitytracker.com/id?1026866https://exchange.xforce.ibmcloud.com/vulnerabilities/74404http://osvdb.org/80695http://secunia.com/advisories/48609http://secunia.com/advisories/48641http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-sshhttp://www.securityfocus.com/bid/52752http://www.securitytracker.com/id?1026866https://exchange.xforce.ibmcloud.com/vulnerabilities/74404
2012-03-29
Published