CVE-2012-0384: Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S,...

Security readout for executives and security teams

CVE-2012-0384 is a Cisco IOS and IOS XE authorization bypass. An already authenticated remote user could use HTTP or HTTPS management access to run commands they should not be allowed to run when AAA authorization is enabled. The business concern is unauthorized change or visibility on network devices, not unauthenticated internet compromise. Exposure is most likely on older Cisco IOS or IOS XE devices that still run affected trains and expose HTTP or HTTPS management to users authenticated through AAA. Organizations with retired, lab, or long-lived network infrastructure should not assume this is gone without inventory validation. Treat this as a priority legacy network-infrastructure issue. It is not described as unauthenticated or actively exploited in the bundle, but affected devices could allow authenticated users to exceed intended privileges on routers or switches, creating change-control and outage risk. Mitigation focus: Identify Cisco IOS and IOS XE versions on all managed network devices.; Check Cisco advisory cisco-sa-20120328-pai for vendor-corrected releases and guidance.; Prioritize upgrades for devices with HTTP or HTTPS management enabled..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.