CVE-2012-1324: Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, all...

Security readout for executives and security teams

This CVE describes a Cisco IOS crash risk, not data theft. A device running affected IOS versions with Zone-Based Firewall and IPS policies could be remotely crashed by IPv6 traffic, causing service disruption. The source bundle does not provide CVSS, fixed versions, or evidence of active exploitation. Exposure is limited to organizations running Cisco IOS 15.1 or 15.2 with Zone-Based Firewall and IPS policies configured, especially where untrusted IPv6 traffic can reach the device. The source bundle does not provide specific CPEs or fixed-release mapping. Prioritize if legacy Cisco IOS firewalls protect critical networks or internet-facing IPv6 paths. For non-exposed or unaffected configurations, handle through normal lifecycle remediation. The main business risk is network outage from device crash. Mitigation focus: Check Cisco guidance for Bug ID CSCtk53534 and affected/fixed releases.; Inventory Cisco IOS 15.1 and 15.2 devices using Zone-Based Firewall with IPS policies.; Limit untrusted IPv6 traffic to affected device paths where operationally feasible..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.