CVE-2012-0359

The Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of service (device crash or hang) via malformed network traffic, aka Bug ID CSCto71445.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2012-02/0186.html
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius	Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2012-02/0186.html
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:cisco:cius_software::::::::
	cpe:2.3:a:cisco:cius_software:9.2:::::::*
	cpe:2.3:a:cisco:cius_software:9.2\(1\):::::::*
	cpe:2.3:a:cisco:cius_software:9.2\(2\):::::::*
	cpe:2.3:a:cisco:cius_software:9.2\(2\)at:::::::*

OR	cpe:2.3:h:cisco:cius:-:::::::*
	cpe:2.3:h:cisco:cius:7-at-k9:::::::*
	cpe:2.3:h:cisco:cius:7-k9:::::::*

History

21 Nov 2024, 01:34

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2012-02/0186.html -~~	() http://archives.neohapsis.com/archives/bugtraq/2012-02/0186.html -
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius - Vendor Advisory

Information

Published : 2012-03-01 01:55

Updated : 2024-11-21 01:34

NVD link : CVE-2012-0359

Mitre link : CVE-2012-0359

CVE.ORG link : CVE-2012-0359

JSON object : View

Products Affected

cisco

cius
cius_software

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2012-0359", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-03-01T01:55:00.957", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0186.html", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0186.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "The Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of service (device crash or hang) via malformed network traffic, aka Bug ID CSCto71445."}, {"lang": "es", "value": "Cisco Cius con software anterior a v9.2(1) SR2 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de dispositivo) a trav\u00e9s de tr\u00e1fico de red manipulado, tambi\u00e9n conocido como Bug ID CSCto71445."}], "lastModified": "2024-11-21T01:34:50.530", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:cius_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D711AFDA-9CBD-41F3-8A91-1688BDEE2E1E", "versionEndIncluding": "9.2\\(1\\)sr1"}, {"criteria": "cpe:2.3:a:cisco:cius_software:9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F25C4172-39CF-4C2F-AF93-0AE8F62D35D1"}, {"criteria": "cpe:2.3:a:cisco:cius_software:9.2\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C41FE028-E273-4788-8D50-AE837F131D1E"}, {"criteria": "cpe:2.3:a:cisco:cius_software:9.2\\(2\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89991306-CC36-4492-827C-5F23DA8AEE01"}, {"criteria": "cpe:2.3:a:cisco:cius_software:9.2\\(2\\)at:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "283BC762-6D18-441E-B497-ABAC09E60E78"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:cius:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B0C6852-0A0B-4462-AAD5-E000629BA51B"}, {"criteria": "cpe:2.3:h:cisco:cius:7-at-k9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EC2CA7C-4184-4A70-BEFA-A75C9ED443C9"}, {"criteria": "cpe:2.3:h:cisco:cius:7-k9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "071BD60E-2FF1-4B33-AA23-5BC4DA6EC7C2"}], "operator": "OR"}], "operator": "AND"}], "evaluatorComment": "Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius\r\n\r\n'Vulnerable Products\r\nThe following products are affected by the vulnerability detailed in this advisory:\r\n\r\n * Cius Wifi devices running Cius Software Version 9.2(1) SR1 and prior'", "sourceIdentifier": "ykramarz@cisco.com"}