« Volver al listado

CVE-2012-3899

Estado: ModificadaMedia (5)—

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Cisco — Intrusion Prevention SystemCisco — IPS 4240Cisco — IPS 4250 SXCisco — IPS 4255Cisco — IPS 4260Cisco — IPS 4270-20

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3899",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-09-16T10:34:50.910",
  "references": [
    {
      "url": "http://www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051."
    },
    {
      "lang": "es",
      "value": "sensorApp en Cisco IPS serie 4200 sensores v6.0, v6.2, y v7.0 no direcciona la memoria de forma adecuada, lo que podría permitir a atacantes remotod provocar una denegación de servicio (corrupción de memoria, caída del proceso e inspección del tráfico fuera de rango) a través del tráfico de red, también conocido como Bug ID CSCtn23051."
    }
  ],
  "lastModified": "2026-06-16T23:44:04.907",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B010D14A-7275-454B-B2F8-31EE0D34C24F"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B235817-21BA-40AF-AC39-7343007ABF55"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03105E7F-12F8-4497-8A27-BD2F1653FD38"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ips_4240:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "661A7A3E-09E3-44DA-AEB5-8021BCEF30EF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4250_sx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC8C8063-E6F7-44AB-8FCB-2FDCBE54CBF8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4255:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A2BCB3B-CE33-4B96-A125-8E7001845A5C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4260:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C3637DA-60C8-4F15-8906-F67ADA344A18"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4270-20:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9F6387E-B7DF-4146-B24F-0D99190FA71B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}