CVE-2012-0382 json
The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x…
published 2012-03-29 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0418
- cvss
- 7.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet, aka Bug ID CSCtr28857.
Patch / fix
- cisco ios_xe 3.2.2sg, 3.4.1s
Exploit prediction
3.81% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-400 Uncontrolled Resource Consumption
- Technology feeds
References
-
tools.cisco.com
/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp
vendor-advisory
-
securitytracker.com
/id?1026868
vdb-entry, third-party-advisory
-
secunia.com
/advisories/48630
third-party-advisory, not-applicable
-
securityfocus.com
/bid/52759
vdb-entry, third-party-advisory
-
osvdb.org
/80693
vdb-entry, broken-link
-
secunia.com
/advisories/48633
third-party-advisory, not-applicable
-
exchange.xforce.ibmcloud.com
/vulnerabilities/74431
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2012-0382
- NVD CVE-2012-0382
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.