CVE-2012-3923

Published: Sep 16, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827.

Affected (4)

Products: Cisco: Ios

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.4
Cisco Ios	Version 15.0
Cisco Ios	Version 15.1
Cisco Ios	Version 15.2

References (4)

http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html

Source: psirt@cisco.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78670

Source: psirt@cisco.com

http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78670

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.