Lucene search
CiscoCVE-2013-3445HistoryJul 29, 2013 - 1:59 p.m.
CVE-2013-3445
2013-07-2913:59:06
CWE-264
cisco
web.nvd.nist.gov
24
cisco
identity services engine
firewall
vulnerability
remote attackers
denial of service
ip packets
nvd
bug id cscug94572
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.9
Confidence
High
EPSS
0.015
Percentile
87.1%
The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service (CPU consumption or process crash) via a flood of malformed IP packets, aka Bug ID CSCug94572.
Affected configurations
Node
ciscoidentity_services_engineMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | identity_services_engine | - | cpe:/h:cisco:identity_services_engine:-::: |
Related
cisco
cisco
Cisco Identity Services Engine High CPU Utilization Vulnerability
2013-07-25 16:01:42
cvelist
cvelist
CVE-2013-3445
2013-07-26 17:00:00
prion
prion
Design/Logic Flaw
2013-07-29 13:59:00
nvd
nvd
CVE-2013-3445
2013-07-29 13:59:06
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.9
Confidence
High
EPSS
0.015
Percentile
87.1%
Related for CVE-2013-3445