CVE-2011-3282: High severity cisco ios vulnerability

Published Oct 3, 2011

Updated

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device reload) via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155.

Affected Software

37 affected components

cisco IOS=12.2\(33\)sre

cisco IOS=12.2\(33\)sre0a

cisco IOS=12.2\(33\)sre1

cisco IOS=12.2\(33\)sre2

cisco IOS=12.2\(33\)sre3

cisco IOS=12.2sre

cisco IOS=15.0

cisco IOS=15.1

Cisco IOS XE=2.1.0

Cisco IOS XE=2.1.1

Cisco IOS XE=2.1.2

Cisco IOS XE=2.2.1

Cisco IOS XE=2.2.2

Cisco IOS XE=2.2.3

Cisco IOS XE=2.3.0

Cisco IOS XE=2.3.1

Cisco IOS XE=2.3.2

Cisco IOS XE=2.4.0

Cisco IOS XE=2.4.1

Cisco IOS XE=2.4.2

Cisco IOS XE=2.4.3

Cisco IOS XE=2.4.4

Cisco IOS XE=2.5.0

Cisco IOS XE=2.5.1

Cisco IOS XE=2.5.2

Cisco IOS XE=2.6.0

Cisco IOS XE=2.6.1

Cisco IOS XE=2.6.2

Cisco IOS XE=3.1.0s

Cisco IOS XE=3.1.1s

Cisco IOS XE=3.1.2s

Cisco IOS XE=3.1.3s

Cisco IOS XE=3.1.4s

Cisco IOS XE=3.2.0s

Cisco IOS XE=3.2.1s

Cisco IOS XE=3.2.2s

Cisco IOS XE=3.3.0s

Event History

Oct 3, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3282?

CVE-2011-3282 has a severity rating that indicates it can lead to a denial of service through a device reload.

How do I fix CVE-2011-3282?

To fix CVE-2011-3282, you should upgrade to a fixed version of Cisco IOS or IOS XE as advised by Cisco's security advisories.

Which versions are affected by CVE-2011-3282?

CVE-2011-3282 affects Cisco IOS versions 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, as well as IOS XE versions 2.1.x through 3.3.x.

Can CVE-2011-3282 be exploited remotely?

Yes, CVE-2011-3282 can be exploited remotely via specially crafted ICMPv6 packets.

What is the impact of CVE-2011-3282 on my network devices?

The impact of CVE-2011-3282 is a potential device reload resulting in denial of service, which can disrupt network operations.