What’s Vulnerable › Vulnerabilities

CVE-2012-5017

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-23 · updated 2026-06-16
• Weakness: CWE-20

Description

Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268.

Affected products

• Cisco Asr 1001: all versions
• Cisco Asr 1002: all versions
• Cisco Asr 1002-X: all versions
• Cisco Asr 1002 Fixed Router: all versions
• Cisco Asr 1004: all versions
• Cisco Asr 1006: all versions
• Cisco Asr 1023 Router: all versions
• Cisco IOS: through 15.1\(1\)sy; 15.1

References

• http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
• http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf

Get alerted when CVE-2012-5017 or the next vulnerability affects your stack