CVE-2011-4012: Cisco IOS

High severity, CVSS 9.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C (PFC3C) is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091.

Affected products

• Cisco IOS: version 12.0 only; version 15.0 only; version 15.1 only

Published 2012-05-02. Last modified 2026-06-16.