Vulnerability in Cisco iOS Xr

CVE-2011-0949

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417.

EPSS: 0.012 (65.1th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios_xr — versions 3.6.0, 3.6.1, 3.6.2
  • N/a — versions n/a

Weakness classification (CWE)

References