CVE-2012-0386

Published: Mar 29, 2012Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.

Affected (34)

Products: Cisco: Ios, Ios Xe

Cisco

2 products

Ios

Ios Xe

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.2
Cisco Ios	Version 12.4
Cisco Ios	Version 15.0
Cisco Ios	Version 15.1
Cisco Ios	Version 15.2

Configuration B

29 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 2.3.0
Cisco Ios Xe	Version 2.3.1
Cisco Ios Xe	Version 2.3.1t
Cisco Ios Xe	Version 2.3.2
Cisco Ios Xe	Version 2.3
Cisco Ios Xe	Version 2.4.0
Cisco Ios Xe	Version 2.4.1
Cisco Ios Xe	Version 2.4.2
Cisco Ios Xe	Version 2.4.3
Cisco Ios Xe	Version 2.4.4
Cisco Ios Xe	Version 2.4
Cisco Ios Xe	Version 2.5.0
Cisco Ios Xe	Version 2.5.1
Cisco Ios Xe	Version 2.5.2
Cisco Ios Xe	Version 2.6.0
Cisco Ios Xe	Version 2.6.1
Cisco Ios Xe	Version 2.6.2
Cisco Ios Xe	Version 3.1.0s
Cisco Ios Xe	Version 3.1.0sg
Cisco Ios Xe	Version 3.1.1s
Cisco Ios Xe	Version 3.1.1sg
Cisco Ios Xe	Version 3.1.2s
Cisco Ios Xe	Version 3.1.3s
Cisco Ios Xe	Version 3.1.4s
Cisco Ios Xe	Version 3.2.0s
Cisco Ios Xe	Version 3.2.1s
Cisco Ios Xe	Version 3.2.2s
Cisco Ios Xe	Version 3.3.0s
Cisco Ios Xe	Version 3.4.0s