CVE-2012-0381 json
The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS befo…
published 2012-03-29 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0417
- cvss
- 7.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCts38429.
Patch / fix
- cisco ios_xe 3.2.2sg, 3.4.1s
Exploit prediction
3.81% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-310 Cryptographic Issues
- Technology feeds
References
-
tools.cisco.com
/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ike
vendor-advisory
-
securityfocus.com
/bid/52757
vdb-entry, third-party-advisory
-
osvdb.org
/80700
vdb-entry, broken-link
-
secunia.com
/advisories/48605
third-party-advisory, not-applicable
-
exchange.xforce.ibmcloud.com
/vulnerabilities/74427
vdb-entry, third-party-advisory
-
securitytracker.com
/id?1026863
vdb-entry, third-party-advisory
-
secunia.com
/advisories/48607
third-party-advisory, not-applicable
Sources
- CVE List CVE-2012-0381
- NVD CVE-2012-0381
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.