CVE-2012-5014

Severity: medium (CVSS 6.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-23 · updated 2026-06-16

Description

Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client into a (1) slow or (2) idle state, aka Bug ID CSCto87436.

Affected products

Cisco IOS: through 15.1\(1\)sy3; 15.1, 15.1(1)sy, 15.1(1)sy1, 15.1(1)sy2

References

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf

Get alerted when CVE-2012-5014 or the next vulnerability affects your stack