CVE-2011-3280

7.5 highEPSS 1.8%

High (7.5) in cisco. EPSS 1.8% chance of exploitation in the next 30 days.

Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCtj04672.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2011-10-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:ios
cisco:ios_xe

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=24120
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4d.shtml
http://tools.cisco.com/security/center/viewAlert.x?alertId=24120
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4d.shtml

Check your stack JSON