Unscored CVE-2012-0386 EUVD-2012-0422GHSA-9hf6-wfwp-jr92

The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.…

Published Mar 29, 2012 · Updated Aug 6, 2024 · Assigned by cisco

Description

The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.

References

1026866 vdb-entry
48609 third-party-advisory
48641 third-party-advisory
80695 vdb-entry
52752 vdb-entry
20120328 Cisco IOS Software Reverse SSH Denial of Service Vulnerability vendor-advisory
ciscoios-sshv2-dos(74404) vdb-entry