Lucene search
CiscoCVE-2013-5469HistoryAug 30, 2013 - 8:55 p.m.
CVE-2013-5469
2013-08-3020:55:08
CWE-119
cisco
web.nvd.nist.gov
32
4
cisco
ios
tcp
implementation
denial of service
vulnerability
nvd
cve-2013-5469
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.8
Confidence
High
EPSS
0.012
Percentile
85.1%
The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399.
Affected configurations
Node
ciscoiosMatch-
References
Social References
More
Related
cisco
cisco
Cisco IOS Software TCP ACK Storm Vulnerability
2013-09-03 17:25:13
prion
prion
Code injection
2013-08-30 20:55:00
cvelist
cvelist
CVE-2013-5469
2013-08-30 20:00:00
nvd
nvd
CVE-2013-5469
2013-08-30 20:55:08
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.8
Confidence
High
EPSS
0.012
Percentile
85.1%
Related for CVE-2013-5469