Improper input validation in Cisco iOS

CVE-2011-4231

Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq61128.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.006 (44.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios — versions 15.1, 15.2
Cisco Ios_xe — versions 3.1.0s, 3.1.0sg, 3.1.1s
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)