VULNERABILITY INTELLIGENCE
CVE-2012-5032
CVSS score6.4 MEDIUM
EPSS probability1.28%
CISA KEVNot currently listed
Published2014-04-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P
Description
The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an arbitrary device to become a cluster member, aka Bug ID CSCub93641.
Weakness classification
- CWE-287: Improper Authentication