CVE-2012-0386

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-03-29 · updated 2026-06-16
Weakness: CWE-310

Description

The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.

Affected products

Cisco IOS: 12.2, 12.4, 15.0, 15.1, 15.2
Cisco IOS XE: 2.3, 2.3.0, 2.3.1, 2.3.1t, 2.3.2, 2.4 (+23)

References

http://osvdb.org/80695
http://secunia.com/advisories/48609
http://secunia.com/advisories/48641
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ssh
http://www.securityfocus.com/bid/52752
http://www.securitytracker.com/id?1026866
https://exchange.xforce.ibmcloud.com/vulnerabilities/74404
http://osvdb.org/80695
http://secunia.com/advisories/48609
http://secunia.com/advisories/48641
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ssh
http://www.securityfocus.com/bid/52752

Get alerted when CVE-2012-0386 or the next vulnerability affects your stack