CVE-2012-3915: Cisco IOS

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602.

Affected products

• Cisco IOS: version 15.2 only

Published 2012-09-16. Last modified 2026-06-16.