CVE-2012-5014: Cisco IOS

Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client into a (1) slow or (2) idle state, aka Bug ID CSCto87436.

Affected products

• Cisco IOS: up to and including 15.1\(1\)sy3; version 15.1 only; version 15.1(1)sy only; version 15.1(1)sy1 only; version 15.1(1)sy2 only

Published 2014-04-23. Last modified 2026-06-16.