12.4.21a

DATE	CVE	VULNERABILITY TITLE	RISK
2016-05-29	CVE-2016-1409	Improper Input Validation vulnerability in Cisco IOS The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016. network low complexity cisco CWE-20	5.0
2014-04-23	CVE-2012-5017	Improper Input Validation vulnerability in Cisco products Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268. network low complexity cisco CWE-20	6.8