CVE-2011-3274

Severity: medium (CVSS 6.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-10-03 · updated 2026-06-16

Description

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device crash) via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919.

Affected products

Cisco IOS: 12.2(33)sre, 12.2(33)sre0a, 12.2(33)sre1, 12.2(33)sre2, 12.2(33)sre3, 12.2sre (+2)
Cisco IOS XE: 2.1.0, 2.1.1, 2.1.2, 2.2.1, 2.2.2, 2.2.3 (+23)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=24125
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d52.shtml
http://tools.cisco.com/security/center/viewAlert.x?alertId=24125
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d52.shtml

Get alerted when CVE-2011-3274 or the next vulnerability affects your stack