CVE-2012-1366
UnknownEPSS 0.72%
Last modified
CVE-2012-1366 is a vulnerability of currently unknown severity. Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.. EPSS estimates a 0.72% chance of exploitation in the next 30 days.
Description
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 15.1 |
| Cisco | Asr 1001 | All versions |
| Cisco | Asr 1002 | All versions |
| Cisco | Asr 1002-X | All versions |
| Cisco | Asr 1002 Fixed Router | All versions |
| Cisco | Asr 1004 | All versions |
| Cisco | Asr 1006 | All versions |
| Cisco | Asr 1013 | All versions |
| Cisco | Asr 1023 Router | All versions |
| Cisco | Asr 9000 Rsp440 Router | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-1366?
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.
How severe is CVE-2012-1366?
Severity scoring for CVE-2012-1366 is pending analysis. The EPSS model estimates a 0.72% probability of exploitation in the next 30 days.
How do I fix CVE-2012-1366?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-1348Cisco Wide Area Application Services (WAAS) appliances with …
- CVE-2012-1350Cisco IOS 12.3 and 12.4 on Aironet access points allows remo…
- CVE-2012-1357The igmp_snoop_orib_fill_source_update function in the IGMP …
- CVE-2012-1361Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (M…
- CVE-2012-1364Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remo…
- CVE-2012-1365Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remo…
- CVE-2012-1367The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0,…
- CVE-2012-1370Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057…
- CVE-2012-1380Unspecified vulnerability in the NetEaseWeibo (com.netease.w…
- CVE-2012-1381Unspecified vulnerability in the NetEase CloudAlbum (com.net…
- CVE-2012-1382Unspecified vulnerability in the Youdao Dictionary (com.youd…
- CVE-2012-1383Unspecified vulnerability in the NetEase Reader (com.netease…
Are you affected by CVE-2012-1366?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST