CVE-2012-3899
Last modified
CVE-2012-3899 is a vulnerability of currently unknown severity. sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.. EPSS estimates a 1.23% chance of exploitation in the next 30 days.
Description
sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Intrusion Prevention System | 6.0 |
| Cisco | Intrusion Prevention System | 6.2 |
| Cisco | Intrusion Prevention System | 7.0 |
| Cisco | Ips 4240 | All versions |
| Cisco | Ips 4250 Sx | All versions |
| Cisco | Ips 4255 | All versions |
| Cisco | Ips 4260 | All versions |
| Cisco | Ips 4270-20 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-3899?
How severe is CVE-2012-3899?
How do I fix CVE-2012-3899?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-3887AirDroid before 1.0.7 beta uses a cleartext base64 format fo…
- CVE-2012-3888The login implementation in AirDroid 1.0.4 beta allows remot…
- CVE-2012-3889The in_mod plugin in Winamp before 5.63 allows remote attack…
- CVE-2012-3890The in_mod plugin in Winamp before 5.63 allows remote attack…
- CVE-2012-3893The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows…
- CVE-2012-3895Cisco IOS 15.0 through 15.3 allows remote authenticated user…
- CVE-2012-3901The updateTime function in sensorApp on Cisco IPS 4200 serie…
- CVE-2012-3908Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2012-3913The Cisco VC220 and VC240 cameras allow remote attackers to …
- CVE-2012-3915The DMVPN tunnel implementation in Cisco IOS 15.2 allows rem…
- CVE-2012-3918Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC…
- CVE-2012-3919The Cisco Application Control Engine (ACE) module 3.0 for Ci…
Are you affected by CVE-2012-3899?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST