← Back

Ios

ios

Vendor: Cisco • 613 CVEs

CVEs (613)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-3924
1Cisco
1Ios
Apr 29, 2026
Sep 16, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash...Show more
The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCty97961.Show less
CVE-2012-3923
1Cisco
1Ios
Apr 29, 2026
Sep 16, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of serv...Show more
The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827.Show less
CVE-2012-3915
1Cisco
1Ios
Apr 29, 2026
Sep 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602.
CVE-2012-3895
1Cisco
1Ios
Apr 29, 2026
Sep 16, 2012
N/A· v4
N/A· v3
6.3 MEDIUM· v2
Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update, aka Bug ID CSCty89224.
CVE-2012-3893
1Cisco
1Ios
Apr 29, 2026
Sep 16, 2012
N/A· v4
N/A· v3
6.3 MEDIUM· v2
The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic, aka Bug ID CSCtz02622.
CVE-2012-3079
1Cisco
1Ios
Apr 29, 2026
Sep 16, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957.
CVE-2012-1361
1Cisco
1Ios
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a...Show more
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.Show less
CVE-2012-1350
1Cisco
19Aironet 1040
Aironet 1140Aironet 1260+16 more
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426.
CVE-2012-1344
1Cisco
1Ios
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page, as demonstrated...Show more
Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328.Show less
CVE-2012-1338
1Cisco
9Catalyst 3560
Catalyst 3560 ECatalyst 3560 X+6 more
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
6.3 MEDIUM· v2
Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web authentication quickly, aka Bug ID CSCts88664.
CVE-2012-1367
1Cisco
1Ios
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message with a modified local-preference (aka LOCA...Show more
The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message with a modified local-preference (aka LOCAL_PREF) attribute length, aka Bug ID CSCtq06538.Show less
CVE-2012-1327
1Cisco
1Ios
Apr 29, 2026
May 3, 2012
N/A· v4
N/A· v3
6.1 MEDIUM· v2
dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic, as demonstrated by a video call from Ap...Show more
dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391.Show less
CVE-2012-1324
1Cisco
1Ios
Apr 29, 2026
May 3, 2012
N/A· v4
N/A· v3
7.1 HIGH· v2
Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by sending IPv6 packets, aka Bug ID CSCtk53534.
CVE-2011-4231
1Cisco
2Ios
Ios Xe
Apr 29, 2026
May 3, 2012
N/A· v4
N/A· v3
6.3 MEDIUM· v2
Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified...Show more
Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq61128.Show less
CVE-2011-4019
1Cisco
2Ios
Unified Communications Manager
Apr 29, 2026
May 3, 2012
N/A· v4
N/A· v3
5.4 MEDIUM· v2
Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIB...Show more
Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883.Show less
CVE-2012-0362
1Cisco
1Ios
Apr 29, 2026
May 2, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumst...Show more
The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106.Show less
CVE-2012-0339
1Cisco
1Ios
Apr 29, 2026
May 2, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses v...Show more
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774.Show less
CVE-2012-0338
1Cisco
1Ios
Apr 29, 2026
May 2, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via...Show more
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113.Show less
CVE-2011-4016
1Cisco
1Ios
Apr 29, 2026
May 2, 2012
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial of service (device crash) via crafted net...Show more
The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial of service (device crash) via crafted network traffic, aka Bug ID CSCtf71673.Show less
CVE-2011-4015
1Cisco
1Ios
Apr 29, 2026
May 2, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IOS 15.2S allows remote attackers to cause a denial of service (interface queue wedge) via malformed UDP traffic on port 465, aka Bug ID CSCts48300.