How severe is CVE-2012-1342?

CVE-2012-1342 has a CVSS 3.x base score of 5.8, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.

Is CVE-2012-1342 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (71st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2012-1342?

CVE-2012-1342 primarily affects Cisco Carrier Routing System. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2012-1342?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2012-1342 published?

CVE-2012-1342 was published on 2012-08-06 and last updated on 2026-06-16.

CVE-2012-1342

CVE-2012-1342 is a medium-severity vulnerability in Cisco Carrier Routing System with a CVSS 3.x base score of 5.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-863.

Key facts

Severity: Medium (CVSS 3.x base score 5.8)
CVSS v2: 5.0
EPSS exploit prediction: 2% (71st percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-863
Affected product: Cisco Carrier Routing System
Published: 2012-08-06
Last modified: 2026-06-16

Description

Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975.

Frequently asked questions

What is CVE-2012-1342?: Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975.
How severe is CVE-2012-1342?: CVE-2012-1342 has a CVSS 3.x base score of 5.8, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.
Is CVE-2012-1342 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (71st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2012-1342?: CVE-2012-1342 primarily affects Cisco Carrier Routing System. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2012-1342?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2012-1342 published?: CVE-2012-1342 was published on 2012-08-06 and last updated on 2026-06-16.

References

http://www.cisco.com/cisco/software/release.html?mdfid=279506669&catid=268437899&flowid=1915&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577

Affected products (3)

cpe:2.3:a:cisco:carrier_routing_system:3.9.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:carrier_routing_system:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:carrier_routing_system:4.1.0:*:*:*:*:*:*:*

More vulnerabilities in Cisco Carrier Routing System

CVE-2018-0132 — High (CVSS 8.6): A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated,…
CVE-2019-1918 — High (CVSS 7.4): A vulnerability in the implementation of Intermediate System–to–Intermediate System (IS–IS) routing…
CVE-2019-1910 — High (CVSS 7.4): A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS)…
CVE-2015-0618 — High (CVSS 7.1): Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing…
CVE-2016-6401 — Medium (CVSS 5.3): Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices,…
CVE-2013-1112 — Medium (CVSS 5.0): Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short…

All CVEs affecting Cisco Carrier Routing System →

Other CWE-863 (Incorrect Authorization) vulnerabilities

CVE-2026-48286 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization…
CVE-2026-48303 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization…
CVE-2026-44330 — Critical (CVSS 10.0): free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the…
CVE-2026-46595 — Critical (CVSS 10.0): Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…
CVE-2026-33105 — Critical (CVSS 10.0): Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over…
CVE-2026-32213 — Critical (CVSS 10.0): Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Browse all CWE-863 (Incorrect Authorization) vulnerabilities →