CVE-2012-4658
Cisco IOS < 15.1(1)SY3 - Denial of Service via HTTP Session Termination Issue
Title source: llmDescription
The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that trigger incorrectly terminated HTTP sessions, aka Bug ID CSCtz99447.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
Scores
EPSS
0.0127
EPSS Percentile
66.2%
Details
CWE
CWE-287
Status
published
Products (4)
cisco/ios
15.1
cisco/ios
15.1\(1\)sy
cisco/ios
15.1\(1\)sy1
cisco/ios
< 15.1\(1\)sy2
Published
Apr 23, 2014
Tracked Since
Feb 18, 2026