Vulnerability in Cisco iOS

CVE-2011-3274

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device crash) via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919.

EPSS: 0.007 (50.8th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.2\(33\)sre, 12.2\(33\)sre0a, 12.2\(33\)sre1
  • Cisco Ios_xe — versions 2.1.0, 2.1.1, 2.1.2
  • N/a — versions n/a

References