CVE-2012-4658: Cisco IOS

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that trigger incorrectly terminated HTTP sessions, aka Bug ID CSCtz99447.

Affected products

• Cisco IOS: up to and including 15.1\(1\)sy2; version 15.1 only; version 15.1(1)sy only; version 15.1(1)sy1 only

Published 2014-04-23. Last modified 2026-06-16.