Sign-up

ID

VAR-201404-0032


CVE

CVE-2012-5036


TITLE

Cisco IOS Denial of service in Japan (DoS) Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2012-006201

DESCRIPTION

Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a sequence of VTY management sessions (aka exec sessions), aka Bug ID CSCtn43662. Cisco IOS The denial of service ( Memory consumption ) There is a vulnerability that can be exploited. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches

Trust: 2.25

sources: NVD: CVE-2012-5036 // JVNDB: JVNDB-2012-006201 // CNVD: CNVD-2014-02652 // VULHUB: VHN-58317

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2014-02652

AFFECTED PRODUCTS

vendor:ciscomodel:iosscope:eqversion:12.2\(33\)sxi4

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(33\)sxi6

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(33\)sxi5

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(50\)sy

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(33\)sxi7

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(33\)sxj

Trust: 1.6

vendor:ciscomodel:iosscope:ltversion:12.2(50)sy1

Trust: 0.8

vendor:ciscomodel:ios 12.2 sy1scope:ltversion: -

Trust: 0.6

sources: CNVD: CNVD-2014-02652 // JVNDB: JVNDB-2012-006201 // CNNVD: CNNVD-201404-455 // NVD: CVE-2012-5036

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-5036
value: MEDIUM

Trust: 1.0

NVD: CVE-2012-5036
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2014-02652
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201404-455
value: MEDIUM

Trust: 0.6

VULHUB: VHN-58317
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2012-5036
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2014-02652
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-58317
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2014-02652 // VULHUB: VHN-58317 // JVNDB: JVNDB-2012-006201 // CNNVD: CNNVD-201404-455 // NVD: CVE-2012-5036

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-58317 // JVNDB: JVNDB-2012-006201 // NVD: CVE-2012-5036

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201404-455

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201404-455

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-006201

PATCH
title:Release Notes for Cisco IOS Release 12.2(50)SYurl:http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/release/notes/ol_20679.html
Trust: 0.8
title:Patch for Cisco IOS Denial of Service Vulnerability (CNVD-2014-02652)url:https://www.cnvd.org.cn/patchInfo/show/45189
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2014-02652 // 
            
            
            
            JVNDB: JVNDB-2012-006201

EXTERNAL IDS
db:NVDid:CVE-2012-5036
Trust: 3.1
db:JVNDBid:JVNDB-2012-006201
Trust: 0.8
db:CNNVDid:CNNVD-201404-455
Trust: 0.7
db:CNVDid:CNVD-2014-02652
Trust: 0.6
db:VULHUBid:VHN-58317
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2014-02652 // 
            
            
            
            VULHUB: VHN-58317 // 
            
            
            
            JVNDB: JVNDB-2012-006201 // 
            
            
            
            CNNVD: CNNVD-201404-455 // 
            
            
            
            NVD: CVE-2012-5036

REFERENCES
url:http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2sy/release/notes/ol_20679.html
Trust: 1.7
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-5036
Trust: 1.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-5036
Trust: 0.8
sources:
            
            
            CNVD: CNVD-2014-02652 // 
            
            
            
            VULHUB: VHN-58317 // 
            
            
            
            JVNDB: JVNDB-2012-006201 // 
            
            
            
            CNNVD: CNNVD-201404-455 // 
            
            
            
            NVD: CVE-2012-5036

SOURCES
db:CNVDid:CNVD-2014-02652
db:VULHUBid:VHN-58317
db:JVNDBid:JVNDB-2012-006201
db:CNNVDid:CNNVD-201404-455
db:NVDid:CVE-2012-5036

LAST UPDATE DATE
2025-04-13T23:18:24.808000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2014-02652date:2014-04-28T00:00:00
db:VULHUBid:VHN-58317date:2014-04-23T00:00:00
db:JVNDBid:JVNDB-2012-006201date:2014-04-24T00:00:00
db:CNNVDid:CNNVD-201404-455date:2014-04-25T00:00:00
db:NVDid:CVE-2012-5036date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:CNVDid:CNVD-2014-02652date:2014-04-28T00:00:00
db:VULHUBid:VHN-58317date:2014-04-23T00:00:00
db:JVNDBid:JVNDB-2012-006201date:2014-04-24T00:00:00
db:CNNVDid:CNNVD-201404-455date:2014-04-25T00:00:00
db:NVDid:CVE-2012-5036date:2014-04-23T11:52:59.167