The IOS HTTP service in Cisco routers and switches running IOS 11.1 up to and including 12.1 allows remote malicious users to cause a denial of service by requesting a URL that contains a %% string.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco ios 11.2\\(9\\)p |
||
cisco ios 11.2\\(9\\)xa |
||
cisco ios 11.2p |
||
cisco ios 11.3 |
||
cisco ios 12.0\\(2\\)xf |
||
cisco ios 12.0\\(2\\)xg |
||
cisco ios 12.0\\(3\\)t2 |
||
cisco ios 12.0\\(4\\) |
||
cisco ios 12.0\\(4\\)s |
||
cisco ios 11.2\\(10\\)bc |
||
cisco ios 11.2\\(4\\)f1 |
||
cisco ios 11.2\\(8\\)p |
||
cisco ios 11.3\\(1\\) |
||
cisco ios 11.3\\(1\\)t |
||
cisco ios 12.0\\(2\\) |
||
cisco ios 12.0\\(2\\)xd |
||
cisco ios 12.0\\(5\\) |
||
cisco ios 12.0\\(6\\) |
||
cisco ios 12.0s |
||
cisco ios 11.1 |
||
cisco ios 11.2 |
||
cisco ios 11.2\\(10\\) |
||
cisco ios 12.0 |
||
cisco ios 12.0\\(1\\)w |
||
cisco ios 12.0\\(1\\)xa3 |
||
cisco ios 12.0\\(1\\)xb |
||
cisco ios 12.0\\(7\\)t |
||
cisco ios 12.0\\(8\\) |
||
cisco ios 12.0\\(9\\)s |
||
cisco ios 12.0db |
||
cisco ios 11.2\\(17\\) |
||
cisco ios 11.2\\(8\\) |
||
cisco ios 11.3\\(1\\)ed |
||
cisco ios 11.3t |
||
cisco ios 12.0\\(1\\)xe |
||
cisco ios 12.0\\(2\\)xc |
||
cisco ios 12.0\\(4\\)t |
||
cisco ios 12.0\\(5\\)t1 |
||
cisco ios 12.0t |
Vulmon