CVE-2012-3950

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-27 · updated 2026-06-16
Weakness: CWE-399

Description

The Intrusion Prevention System (IPS) feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15.2, in certain configurations of enabled categories and missing signatures, allows remote attackers to cause a denial of service (device reload) via DNS packets, aka Bug ID CSCtw55976.

Affected products

Cisco IOS: 12.3, 12.3(1a), 12.3(2)ja, 12.3(2)ja5, 12.3(2)jk, 12.3(2)jk1 (+285)

References

http://secunia.com/advisories/50777
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ios-ips
http://www.securityfocus.com/bid/55695
http://www.securitytracker.com/id?1027580
https://exchange.xforce.ibmcloud.com/vulnerabilities/78882
http://secunia.com/advisories/50777
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ios-ips
http://www.securityfocus.com/bid/55695
http://www.securitytracker.com/id?1027580
https://exchange.xforce.ibmcloud.com/vulnerabilities/78882

Get alerted when CVE-2012-3950 or the next vulnerability affects your stack