Every CVE Search/ Get API key

CVE-2012-5044

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a...

5.4 Medium

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809.

Exploit likelihood

1.06%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.4

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809.

Record
CVE-2012-5044
CVSS 2.0
5.4 MediumAV:N/AC:H/Au:N/C:N/I:N/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809.

Record
CVE-2012-5044
Updated
2026-11-02
EUVDEUVD-2012-4968 No score

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809.

Record
EUVD-2012-4968
Updated
2026-11-03
GitHub AdvisoriesGHSA-h7xg-v6r4-rfh3 No score

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a...

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809.

Record
GHSA-h7xg-v6r4-rfh3
Weakness
CWE-119
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5044 is a medium vulnerability (CVSS 5.4) in Cisco Ios, published April 23, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.06%, the 64th percentile. No source names a fixed version.

References

MoveEnter Open