Cisco IOS NAT Functionality CVE-2012-4618 Denial of Service Vulnerability

Bugtraq ID:	55693
Class:	Unknown
CVE:	CVE-2012-4618
Remote:	Yes
Local:	No
Published:	Sep 26 2012 12:00AM
Updated:	Mar 19 2015 08:42AM
Credit:	Cisco
Vulnerable:	Cisco Ios 15.2T Cisco Ios 15.2GC Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 12.4MDB Cisco IOS 12.4MD Cisco IOS 12.4(25e) Cisco IOS 12.4(25c) Cisco IOS 12.4(25b) Cisco IOS 12.4(25a) Cisco IOS 12.4(24)T6 Cisco Ios 12.4(24)MDA3 Cisco IOS 12.4(23b) Cisco IOS 12.4(23a) Cisco IOS 12.4(15)T15 Cisco IOS 12.2SXJ Cisco IOS 12.2SXI Cisco IOS 12.2SXH Cisco IOS 12.2(50)SY
Not Vulnerable:	Cisco Ios 15.2(3)T Cisco Ios 15.2(2)T1 Cisco Ios 15.1(4)M3 Cisco Ios 15.1(3)T3 Cisco Ios 15.1(2)GC2 Cisco IOS 12.4(22)GC1 Cisco Ios 12.2(33)SXJ1 Cisco Ios 12.2(33)SXI7

Cisco IOS NAT Functionality CVE-2012-4618 Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

Successful exploit of this issue could allow the attacker to cause the targeted device to reload, resulting in denial of service conditions.

Note: To successfully exploit this issue the NAT SIP ALG feature should be enabled in the device.

This issue is being tracked by Cisco Bug ID CSCtn76183.

Cisco IOS NAT Functionality CVE-2012-4618 Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS NAT Functionality CVE-2012-4618 Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for more information.

Cisco IOS NAT Functionality CVE-2012-4618 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• CVE-2012-4618: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco)