Summary
generated automatically from NVD dataCVE-2011-3279 affects the provider-edge MPLS NAT implementation in Cisco IOS (versions 12.1 through 12.4 and 15.0 through 15.1) and Cisco IOS XE 3.1.xSG. A remote attacker can send a malformed SIP packet to UDP port 5060 and cause the device to reload, resulting in a denial of service. The flaw is tracked as Cisco Bug ID CSCti98219 and has a CVSS v2.0 score of 7.8 (HIGH), with network attack vector and no authentication required.
NVD description
The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload) via a malformed SIP packet to UDP port 5060, aka Bug ID CSCti98219.
EPSS · FIRST.org
2.6%probability of exploitation in the next 30 days
Higher than 84% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 3 oct. 2011
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- psirt@cisco.com
Affected products
Weaknesses (CWE)
References (6)
Similar CVEs
Other vulnerabilities of type
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.