Vulnerability in Cisco iOS

CVE-2012-1327

dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391.

EPSS: 0.007 (48.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios — versions 12.3, 12.4, 15.0
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@cisco.com (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_XF)