CVE-2012-5036: Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consump...

Security readout for executives and security teams

This is an old Cisco IOS denial-of-service issue. An authenticated user with management access could consume device memory through repeated VTY, or exec, management sessions. The business risk is availability of affected network infrastructure, not data theft based on the provided sources. Exposure is most likely where Cisco IOS releases before 12.2(50)SY1 are still deployed and VTY management access is available to authenticated users. The provided record does not enumerate exact hardware, configurations, or CPEs, so inventory validation is required. Treat this as a network availability risk requiring inventory review, especially for legacy Cisco IOS deployments. It is not supported by evidence of active exploitation in the supplied sources, but unpatched infrastructure with broad management access should be prioritized for remediation. Mitigation focus: Verify whether any Cisco IOS device runs before 12.2(50)SY1.; Review Cisco guidance for Bug ID CSCtn43662 and applicable fixed releases.; Upgrade affected devices to 12.2(50)SY1 or a vendor-supported fixed release..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.