Is CVE-2012-3923 being actively exploited?

CVE-2012-3923 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2012-3923?

CVE-2012-3923 has a CVSS 2.0 base score of 3.5 (LOW).

CVE-2012-3923

LOW · CVSS 3.5EPSS 0.9%EU EUVD

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827.

Key facts

CVSS score: 3.5 (v2.0)
Severity: LOW
CVSS vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
EPSS score: 0.9% (59th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2012-3867)
Published: September 16, 2012
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2012-3867 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

cisco / ios
cisco / ios
cisco / ios
cisco / ios

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain