What’s Vulnerable › Vulnerabilities

CVE-2012-1366

• Severity: medium (CVSS 6.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-23 · updated 2026-06-16
• Weakness: CWE-20

Description

Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.

Affected products

• Cisco Asr 1001: all versions
• Cisco Asr 1002: all versions
• Cisco Asr 1002-X: all versions
• Cisco Asr 1002 Fixed Router: all versions
• Cisco Asr 1004: all versions
• Cisco Asr 1006: all versions
• Cisco Asr 1013: all versions
• Cisco Asr 1023 Router: all versions
• Cisco Asr 9000 Rsp440 Router: all versions
• Cisco IOS: 15.1

References

• http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
• http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf

Get alerted when CVE-2012-1366 or the next vulnerability affects your stack