Lucene search

K
cveCiscoCVE-2013-1148
HistoryMar 28, 2013 - 11:55 p.m.

CVE-2013-1148

2013-03-2823:55:01
CWE-119
cisco
web.nvd.nist.gov
27
cisco
general responder
ip service level agreement
denial of service
cve-2013-1148

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

53.2%

The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S allows remote attackers to cause a denial of service (device reload) via crafted (1) IPv4 or (2) IPv6 IP SLA packets on UDP port 1167, aka Bug ID CSCuc72594.

Affected configurations

Nvd
Node
ciscoiosMatch15.2
Node
ciscoios_xeMatch3.1.0s
OR
ciscoios_xeMatch3.1.1s
OR
ciscoios_xeMatch3.1.2s
OR
ciscoios_xeMatch3.1.3s
OR
ciscoios_xeMatch3.1.4s
OR
ciscoios_xeMatch3.2.0s
OR
ciscoios_xeMatch3.2.1s
OR
ciscoios_xeMatch3.2.2s
OR
ciscoios_xeMatch3.3.0s
OR
ciscoios_xeMatch3.3.1s
OR
ciscoios_xeMatch3.3.2s
OR
ciscoios_xeMatch3.3.3s
OR
ciscoios_xeMatch3.4.0s
OR
ciscoios_xeMatch3.4.1s
OR
ciscoios_xeMatch3.4.2s
OR
ciscoios_xeMatch3.4.3s
Node
ciscoios_xeMatch3.5.0s
OR
ciscoios_xeMatch3.5.1s
OR
ciscoios_xeMatch3.5.2s
VendorProductVersionCPE
ciscoios15.2cpe:2.3:o:cisco:ios:15.2:*:*:*:*:*:*:*
ciscoios_xe3.1.0scpe:2.3:o:cisco:ios_xe:3.1.0s:*:*:*:*:*:*:*
ciscoios_xe3.1.1scpe:2.3:o:cisco:ios_xe:3.1.1s:*:*:*:*:*:*:*
ciscoios_xe3.1.2scpe:2.3:o:cisco:ios_xe:3.1.2s:*:*:*:*:*:*:*
ciscoios_xe3.1.3scpe:2.3:o:cisco:ios_xe:3.1.3s:*:*:*:*:*:*:*
ciscoios_xe3.1.4scpe:2.3:o:cisco:ios_xe:3.1.4s:*:*:*:*:*:*:*
ciscoios_xe3.2.0scpe:2.3:o:cisco:ios_xe:3.2.0s:*:*:*:*:*:*:*
ciscoios_xe3.2.1scpe:2.3:o:cisco:ios_xe:3.2.1s:*:*:*:*:*:*:*
ciscoios_xe3.2.2scpe:2.3:o:cisco:ios_xe:3.2.2s:*:*:*:*:*:*:*
ciscoios_xe3.3.0scpe:2.3:o:cisco:ios_xe:3.3.0s:*:*:*:*:*:*:*
Rows per page:
1-10 of 201

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

53.2%