CVE-2012-5037: Medium severity cisco IOS vulnerability
Published Apr 23, 2014
·Updated
The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133.
Affected Software
6 affected components
cisco IOS<=15.1
cisco Catalyst 6500
Cisco Catalyst 7600
All of the following
cisco IOS<=15.1
Any of the following
cisco Catalyst 6500
Cisco Catalyst 7600
Event History
Apr 23, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:52 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-5037?
CVE-2012-5037 has a high severity rating, leading to potential denial of service on affected Cisco devices.
2
How do I fix CVE-2012-5037?
To fix CVE-2012-5037, upgrade Cisco IOS to version 15.1(1)SY or later on affected devices.
3
What devices are affected by CVE-2012-5037?
CVE-2012-5037 affects Cisco Catalyst 6500 and 7600 devices running IOS versions prior to 15.1(1)SY.
4
Can CVE-2012-5037 be exploited remotely?
CVE-2012-5037 requires local access to execute the exploit, making it less likely to be exploited remotely.
5
What specific command sequence triggers CVE-2012-5037?
CVE-2012-5037 is triggered by executing a "no object-group" command followed by an object-group command.