CVE-2012-0381: The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6....

Security readout for executives and security teams

This flaw can let a remote attacker crash and reload affected Cisco IOS or IOS XE devices by sending malformed IKEv1 UDP traffic. For executives, the business impact is network interruption rather than data theft based on the provided sources. Exposure is most likely on Cisco routers or switches running affected IOS or IOS XE versions with IKEv1/IPsec reachable over IPv4 or IPv6. Internet-facing VPN termination points are higher priority. Treat as high priority for edge and VPN infrastructure because exploitation could interrupt network availability. It is less urgent for devices without reachable IKEv1 services or outside the affected version ranges. Mitigation focus: Review Cisco advisory cisco-sa-20120328-ike for fixed software guidance.; Upgrade affected IOS XE S/SG trains to the fixed releases named by Cisco.; Limit IKEv1 reachability to trusted peers where operationally possible..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.