Skip to content
Back to search

CVE-2011-3274

MEDIUM
6.1NVD

Summary

generated automatically from NVD data

CVE-2011-3274 is an unspecified vulnerability in Cisco IOS (including 12.2SRE before 12.2(33)SRE4, 15.0 and 15.1) and Cisco IOS XE 2.1.x through 3.3.x. It affects devices with an MPLS domain configured, where a crafted IPv6 packet tied to an expired MPLS TTL can crash the device. A remote attacker can use this to cause a denial of service. The flaw is tracked as Bug ID CSCto07919 and carries a CVSS v2.0 score of 6.1 (MEDIUM).

NVD description

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device crash) via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919.

Share:

EPSS · FIRST.org

0.74%probability of exploitation in the next 30 days

Higher than 53% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-20, recomputed daily by FIRST.org.

CVSS v2.0 Score

6.1
/ 10.0
MEDIUM
AV:A/AC:L/Au:N/C:N/I:N/A:C

Information

Published
3 oct. 2011
Updated
16 juin 2026
Status
Modified
Source
psirt@cisco.com

Affected products

cisco ios
Versions : 12.2\(33\)sre, 12.2\(33\)sre0a, 12.2\(33\)sre1, 12.2\(33\)sre2, 12.2\(33\)sre3
cisco ios xeAll Cisco IOS XE CVEs →
Versions : 2.1.0, 2.1.1, 2.1.2, 2.2.1, 2.2.2

Weaknesses (CWE)

NVD-CWE-noinfo

References (4)

Similar CVEs

Other vulnerabilities of type

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring