Summary
generated automatically from NVD dataCVE-2011-3272 affects the IP Service Level Agreement (IP SLA) feature in Cisco IOS 15.1 and Cisco IOS XE 2.1.x through 3.3.x. A remote attacker can send malformed IP SLA packets that corrupt memory and force the device to reload, causing a denial of service. The issue is tracked as Cisco Bug ID CSCtk67073 and classified under CWE-399, with a CVSS v2.0 score of 7.8 (HIGH).
NVD description
The IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service (memory corruption and device reload) via malformed IP SLA packets, aka Bug ID CSCtk67073.
EPSS · FIRST.org
2.6%probability of exploitation in the next 30 days
Higher than 84% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 3 oct. 2011
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- psirt@cisco.com
Affected products
Weaknesses (CWE)
References (6)
Similar CVEs
Other vulnerabilities of type CWE-399
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.