« Volver al listado

CVE-2012-1311

Estado: ModificadaAlta (7.8)—

La funcionalidad de gestión de tráfico RSVP en Cisco IOS v15.0 y v15.1 y en IOS XE v3.2.xS a v3.4.xS antes de v3.4.2S, cuando se configura una interfaz VRF, permite a atacantes remotos causar una denegación de servicio (error de procesamiento en la cola del interfaz e interrupción del servicio) a través de paquetes RSVP modificados a mano. Se trata de un problema también conocido como Bug ID CSCts80643.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — IOSCisco — IOS XE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-1311",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-03-29T11:01:16.433",
  "references": [
    {
      "url": "http://osvdb.org/80692",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/48611",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/48621",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-rsvp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/52754",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1026865",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/80692",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/48611",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/48621",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-rsvp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/52754",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1026865",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge and service outage) via crafted RSVP packets, aka Bug ID CSCts80643."
    },
    {
      "lang": "es",
      "value": "La funcionalidad de gestión de tráfico RSVP en Cisco IOS v15.0 y v15.1 y en IOS XE v3.2.xS a v3.4.xS antes de v3.4.2S, cuando se configura una interfaz VRF, permite a atacantes remotos causar una denegación de servicio (error de procesamiento en la cola del interfaz e interrupción del servicio) a través de paquetes RSVP modificados a mano. Se trata de un problema también conocido como Bug ID CSCts80643."
    }
  ],
  "lastModified": "2026-06-16T23:39:22.520",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF87CC9A-1AF5-4DB4-ACE5-DB938D3B2F84"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB41294E-F3DF-4F1E-A4C8-E90B21A88836"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.2.0s:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "621845E0-E885-46E4-929D-55DBE43DC97F"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.2.1s:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "429F3E17-5C65-4C91-8881-AAEAA00BCD44"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.2.2s:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F47E76FF-DE36-463D-B610-A99C90AF7B91"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.3.0s:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEF8A6EC-3C45-4CDB-81B5-4D50CD5C4087"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "252377A3-7F15-45F2-A169-BBC37858D4DA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}