CVE-2012-4617

Published: Sep 27, 2012Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection resets) by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248, and CSCtz62914.

Affected (9)

Products: Cisco: Ios, Ios Xe, Ios Xr

3 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 15.2
Cisco Ios Xe	Version 3.5.0s
Cisco Ios Xe	Version 3.5.1s
Cisco Ios Xr	Version 4.1.1
Cisco Ios Xr	Version 4.1.2
Cisco Ios Xr	Version 4.1
Cisco Ios Xr	Version 4.2.0
Cisco Ios Xr	Version 4.2.1
Cisco Ios Xr	Version 4.2.2