CVEvulnerability

CVE-2011-4007

5.4 MEDIUM Published 2012-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.4 MEDIUM — AV:N/AC:H/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service (device crash) via network traffic that triggers (1) fragmentation or (2) reassembly, aka Bug ID CSCtr56576.

Affected configurations

• cisco ios 15.0 • cisco ios 15.1 • cisco ios xe 3.1.0s • cisco ios xe 3.1.0sg • cisco ios xe 3.1.1s • cisco ios xe 3.1.1sg • cisco ios xe 3.1.2s • cisco ios xe 3.1.3s • cisco ios xe 3.1.4s • cisco ios xe 3.2.0s • cisco ios xe 3.2.0sg • cisco ios xe 3.2.1s • cisco ios xe 3.2.1sg • cisco ios xe 3.2.2s • cisco ios xe 3.3.0s • cisco ios xe 3.3.1s • cisco ios xe 3.3.2s • cisco ios xe 3.3.3s • cisco ios xe 3.4.0s • cisco ios xe 3.4.1s • cisco ios xe 3.5.0s

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References