CVE-2012-1366: Input Validation
Published Apr 23, 2014
·Updated
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.
Affected Software
20 affected components
Cisco IOS=15.1
Cisco Asr 1001
Cisco Asr 1002
Cisco Asr 1002-x
Cisco Asr 1002 Fixed Router
Cisco Asr 1004
Cisco Asr 1006
Cisco Asr 1013
Cisco Asr 1023 Router
Cisco Asr 9000 Rsp440 Router
All of the following
Cisco IOS=15.1
Any of the following
Cisco Asr 1001
Cisco Asr 1002
Cisco Asr 1002-x
Cisco Asr 1002 Fixed Router
Cisco Asr 1004
Cisco Asr 1006
Cisco Asr 1013
Cisco Asr 1023 Router
Cisco Asr 9000 Rsp440 Router
Event History
Apr 23, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:52 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-1366?
CVE-2012-1366 is classified as a high severity vulnerability due to its potential to cause a denial of service by device reload.
2
How do I fix CVE-2012-1366?
To fix CVE-2012-1366, upgrade to Cisco IOS version 15.1(1)SY or later.
3
Which devices are affected by CVE-2012-1366?
CVE-2012-1366 affects Cisco ASR 1000 series devices running affected versions of Cisco IOS.
4
What is the impact of exploiting CVE-2012-1366?
Exploiting CVE-2012-1366 can lead to a denial of service that causes the device to reload unexpectedly.
5
Is there a workaround for CVE-2012-1366?
Currently, there are no documented workarounds for CVE-2012-1366 other than applying the necessary software updates.