Sign-up

ID

VAR-201209-0198


CVE

CVE-2012-4620


TITLE

Cisco 10000 Runs on a series router Cisco IOS Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-004642

DESCRIPTION

Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via tunneled (1) GRE/IP, (2) IPIP, or (3) IPv6 in IPv4 packets, aka Bug ID CSCts66808. Cisco IOS is a popular Internet operating system. As a result, some packets cannot be deleted in the queue. , causing a denial of service attack. This Cisco bug ID is CSCts66808. An attacker can exploit this issue to consume all available space in the affected interface queue, resulting in a queue wedge which may prevent new packets from being processed

Trust: 2.52

sources: NVD: CVE-2012-4620 // JVNDB: JVNDB-2012-004642 // CNVD: CNVD-2012-5490 // BID: 55696 // VULHUB: VHN-57901

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2012-5490

AFFECTED PRODUCTS

vendor:ciscomodel:iosscope:eqversion:12.2

Trust: 3.0

vendor:ciscomodel:iosscope:eqversion:15.2

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:15.0

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:15.0\(1\)se

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:15.1

Trust: 1.6

vendor:ciscomodel:10008 routerscope:eqversion:*

Trust: 1.0

vendor:ciscomodel:iosscope:eqversion:15.0 to 15.2

Trust: 0.8

vendor:ciscomodel:iosscope:eqversion:15.0-15.2

Trust: 0.6

vendor:ciscomodel:10008 routerscope: - version: -

Trust: 0.6

vendor:ciscomodel:ios 12.2 src1scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 srcscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb8scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb6scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb5scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb4scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb3scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb2scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb10scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sb1scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sbscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 srd6scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 srd3scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 srd2scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 srd1scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 src5scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 src4scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 src3scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 src2scope:neversion: -

Trust: 0.3

sources: CNVD: CNVD-2012-5490 // BID: 55696 // JVNDB: JVNDB-2012-004642 // CNNVD: CNNVD-201209-613 // NVD: CVE-2012-4620

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-4620
value: HIGH

Trust: 1.0

NVD: CVE-2012-4620
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201209-613
value: HIGH

Trust: 0.6

VULHUB: VHN-57901
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2012-4620
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-57901
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-57901 // JVNDB: JVNDB-2012-004642 // CNNVD: CNNVD-201209-613 // NVD: CVE-2012-4620

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-57901 // JVNDB: JVNDB-2012-004642 // NVD: CVE-2012-4620

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201209-613

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201209-613

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-004642

PATCH
title:cisco-sa-20120926-c10k-tunnelsurl:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-c10k-tunnels
Trust: 0.8
title:cisco-sa-20120926-c10k-tunnelsurl:http://www.cisco.com/cisco/web/support/JP/111/1116/1116602_cisco-sa-20120926-c10k-tunnels-j.html
Trust: 0.8
title:Patch for Cisco IOS Queue Wedge Denial of Service Vulnerability (CNVD-2012-5490)url:https://www.cnvd.org.cn/patchInfo/show/23323
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2012-5490 // 
            
            
            
            JVNDB: JVNDB-2012-004642

EXTERNAL IDS
db:NVDid:CVE-2012-4620
Trust: 3.4
db:BIDid:55696
Trust: 1.4
db:SECTRACKid:1027578
Trust: 1.1
db:JVNDBid:JVNDB-2012-004642
Trust: 0.8
db:CNNVDid:CNNVD-201209-613
Trust: 0.7
db:CNVDid:CNVD-2012-5490
Trust: 0.6
db:NSFOCUSid:20886
Trust: 0.6
db:CISCOid:20120926 CISCO IOS SOFTWARE TUNNELED TRAFFIC QUEUE WEDGE VULNERABILITY
Trust: 0.6
db:VULHUBid:VHN-57901
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2012-5490 // 
            
            
            
            VULHUB: VHN-57901 // 
            
            
            
            BID: 55696 // 
            
            
            
            JVNDB: JVNDB-2012-004642 // 
            
            
            
            CNNVD: CNNVD-201209-613 // 
            
            
            
            NVD: CVE-2012-4620

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20120926-c10k-tunnels
Trust: 2.6
url:http://www.securityfocus.com/bid/55696
Trust: 1.1
url:http://www.securitytracker.com/id?1027578
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/78883
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-4620
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-4620
Trust: 0.8
url:http://www.nsfocus.net/vulndb/20886
Trust: 0.6
url:http://www.cisco.com/
Trust: 0.3
url:http://www.cisco.com/en/us/products/sw/iosswrel/products_ios_cisco_ios_software_category_home.html
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2012-5490 // 
            
            
            
            VULHUB: VHN-57901 // 
            
            
            
            BID: 55696 // 
            
            
            
            JVNDB: JVNDB-2012-004642 // 
            
            
            
            CNNVD: CNNVD-201209-613 // 
            
            
            
            NVD: CVE-2012-4620

CREDITS
Cisco
Trust: 0.3
sources:
            
            
            BID: 55696

SOURCES
db:CNVDid:CNVD-2012-5490
db:VULHUBid:VHN-57901
db:BIDid:55696
db:JVNDBid:JVNDB-2012-004642
db:CNNVDid:CNNVD-201209-613
db:NVDid:CVE-2012-4620

LAST UPDATE DATE
2025-04-11T23:03:02.169000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2012-5490date:2012-09-28T00:00:00
db:VULHUBid:VHN-57901date:2017-08-29T00:00:00
db:BIDid:55696date:2012-09-26T00:00:00
db:JVNDBid:JVNDB-2012-004642date:2012-09-28T00:00:00
db:CNNVDid:CNNVD-201209-613date:2012-09-27T00:00:00
db:NVDid:CVE-2012-4620date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:CNVDid:CNVD-2012-5490date:2012-09-28T00:00:00
db:VULHUBid:VHN-57901date:2012-09-27T00:00:00
db:BIDid:55696date:2012-09-26T00:00:00
db:JVNDBid:JVNDB-2012-004642date:2012-09-28T00:00:00
db:CNNVDid:CNNVD-201209-613date:2012-09-27T00:00:00
db:NVDid:CVE-2012-4620date:2012-09-27T00:55:01.047