CVE-2012-0382: The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15....

Security readout for executives and security teams

This is a denial-of-service flaw in Cisco IOS and IOS XE multicast routing software. A remote attacker could trigger a device reload by sending malformed MSDP traffic containing encapsulated IGMP data. Business impact is network interruption, especially where affected routers handle multicast routing or critical routing paths. Exposure is most likely on Cisco routers or switches running affected IOS or IOS XE versions with MSDP enabled or reachable from untrusted networks. Organizations not using MSDP, or filtering MSDP access to trusted peers, are less exposed. Prioritize remediation where affected Cisco devices support critical routing, multicast services, or external MSDP peering. The main risk is outage from device reload, not data theft. Treat unsupported legacy IOS or IOS XE as a broader resilience concern. Mitigation focus: Check Cisco advisory cisco-sa-20120328-msdp for fixed software guidance.; Upgrade affected IOS or IOS XE releases to a vendor-supported fixed version.; Restrict MSDP traffic to trusted multicast peers only..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.