CVE-2012-5030

MEDIUM

Cisco IOS <15.2(4)S6 - DoS

Title source: llm

Description

Cisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote authenticated users to cause a denial of service (CPU consumption, watchdog timeout, crash) by walking specific SNMP objects.

References (1)

[Patch, Vendor Advisory] https://www.cisco.com/c/en/us/td/docs/ios/15_2s/release/notes/15_2s_rel_notes/15_2s_caveats_15_2_4s.html

Scores

CVSS v3 6.5

EPSS 0.0045

EPSS Percentile 63.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-399

Status published

Products (2)

cisco/ios < 15.2\(4\)s5

n/a/n/a

Published Aug 02, 2017

Tracked Since Feb 18, 2026