CVE-2012-3899

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-16 · updated 2026-06-16
Weakness: CWE-399

Description

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.

Affected products

Cisco Intrusion Prevention System: 6.0, 6.2, 7.0
Cisco Ips 4240: all versions
Cisco Ips 4250 Sx: all versions
Cisco Ips 4255: all versions
Cisco Ips 4260: all versions
Cisco Ips 4270-20: all versions

References

http://www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt
http://www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt

Get alerted when CVE-2012-3899 or the next vulnerability affects your stack