CVE-2012-4620: High severity cisco 10008 router vulnerability

Published Sep 27, 2012

Updated

Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via tunneled (1) GRE/IP, (2) IPIP, or (3) IPv6 in IPv4 packets, aka Bug ID CSCts66808.

Affected Software

6 affected components

Cisco 10008 Router

Cisco IOS=12.2

Cisco IOS=15.0

Cisco IOS=15.0\(1\)se

Cisco IOS=15.1

Cisco IOS=15.2

Event History

Sep 27, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4620?

CVE-2012-4620 is classified as a high severity vulnerability due to its potential to cause a denial of service on affected Cisco routers.

What are the affected devices for CVE-2012-4620?

CVE-2012-4620 affects Cisco 10000 series routers running Cisco IOS versions 12.2 and 15.0 through 15.2.

How do I fix CVE-2012-4620?

To mitigate CVE-2012-4620, upgrade the Cisco IOS software to a version that is not affected by this vulnerability.

Can CVE-2012-4620 be exploited remotely?

Yes, CVE-2012-4620 can be exploited remotely by sending specially crafted tunneled packets to the affected devices.

What are the impacts of CVE-2012-4620 on affected systems?

The primary impact of CVE-2012-4620 is a denial of service condition that leads to an interface queue wedge, disrupting normal network operations.