CVE-2012-3893: Cisco IOS

Medium severity, CVSS 6.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic, aka Bug ID CSCtz02622.

Affected products

• Cisco IOS: version 15.2 only; version 15.3 only

Published 2012-09-16. Last modified 2026-06-16.