Vulnerability in Cisco iOS

CVE-2011-3282

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device reload) via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155.

EPSS: 0.018 (76.7th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.2\(33\)sre, 12.2\(33\)sre0a, 12.2\(33\)sre1
  • Cisco Ios_xe — versions 2.1.0, 2.1.1, 2.1.2
  • N/a — versions n/a

References