What’s Vulnerable › Vulnerabilities

CVE-2012-1338

• Severity: medium (CVSS 6.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-06 · updated 2026-06-16
• Weakness: CWE-362

Description

Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web authentication quickly, aka Bug ID CSCts88664.

Affected products

• Cisco Catalyst 3560: all versions
• Cisco Catalyst 3560-E: all versions
• Cisco Catalyst 3560-X: all versions
• Cisco Catalyst 3750: all versions
• Cisco Catalyst 3750-E: all versions
• Cisco Catalyst 3750-X: all versions
• Cisco Catalyst 3750 Metro: all versions
• Cisco Catalyst 3750G: all versions
• Cisco IOS: 15.0, 15.1

References

• http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/release/notes/OL25302.html
• http://www.securitytracker.com/id?1027349
• http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/release/notes/OL25302.html
• http://www.securitytracker.com/id?1027349

Get alerted when CVE-2012-1338 or the next vulnerability affects your stack