Lucene search
CiscoCVE-2013-5472HistorySep 27, 2013 - 10:08 a.m.
CVE-2013-5472
2013-09-2710:08:04
CWE-20
cisco
web.nvd.nist.gov
24
ntp
cisco ios
denial of service
vulnerability
cve-2013-5472
nvd
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
49.5%
The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service (device reload) by leveraging an MSDP peer relationship, aka Bug ID CSCuc81226.
Affected configurations
Node
ciscoios_xeMatch2.1.0
ORciscoios_xeMatch2.1.1
ORciscoios_xeMatch2.1.2
ORciscoios_xeMatch2.2.1
ORciscoios_xeMatch2.2.2
ORciscoios_xeMatch2.2.3
ORciscoios_xeMatch2.3.0
ORciscoios_xeMatch2.3.1
ORciscoios_xeMatch2.3.1t
ORciscoios_xeMatch2.3.2
ORciscoios_xeMatch2.4.0
ORciscoios_xeMatch2.4.1
ORciscoios_xeMatch2.4.2
ORciscoios_xeMatch2.4.3
ORciscoios_xeMatch2.4.4
ORciscoios_xeMatch2.5.0
ORciscoios_xeMatch2.5.1
ORciscoios_xeMatch2.5.2
ORciscoios_xeMatch2.6.0
ORciscoios_xeMatch2.6.1
ORciscoios_xeMatch2.6.2
ORciscoios_xeMatch3.1.0s
ORciscoios_xeMatch3.1.0sg
ORciscoios_xeMatch3.1.1s
ORciscoios_xeMatch3.1.1sg
ORciscoios_xeMatch3.1.2s
ORciscoios_xeMatch3.1.3s
ORciscoios_xeMatch3.1.4s
ORciscoios_xeMatch3.2.00.xo.15.0\(2\)xo
ORciscoios_xeMatch3.2.0s
ORciscoios_xeMatch3.2.0sg
ORciscoios_xeMatch3.2.0xo
ORciscoios_xeMatch3.2.1s
ORciscoios_xeMatch3.2.1sg
ORciscoios_xeMatch3.2.2s
ORciscoios_xeMatch3.2.2sg
ORciscoios_xeMatch3.2.3sg
ORciscoios_xeMatch3.2.4sg
ORciscoios_xeMatch3.3.0s
ORciscoios_xeMatch3.3.0sg
Node
ciscoiosMatch12.0
ORciscoiosMatch12.1
ORciscoiosMatch12.2
ORciscoiosMatch12.3
ORciscoiosMatch12.4
ORciscoiosMatch15.0
ORciscoiosMatch15.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios_xe | 2.1.0 | cpe:2.3:o:cisco:ios_xe:2.1.0:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.1.1 | cpe:2.3:o:cisco:ios_xe:2.1.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.1.2 | cpe:2.3:o:cisco:ios_xe:2.1.2:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.2.1 | cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.2.2 | cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.2.3 | cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.0 | cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.1 | cpe:2.3:o:cisco:ios_xe:2.3.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.1t | cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.2 | cpe:2.3:o:cisco:ios_xe:2.3.2:*:*:*:*:*:*:* |
Related
nessus
nessus
prion
prion
Code injection
2013-09-27 10:08:00
cisco
cisco
cvelist
cvelist
CVE-2013-5472
2013-09-27 10:00:00
nvd
nvd
CVE-2013-5472
2013-09-27 10:08:04
securityvulns
securityvulns
Cisco IOS multiple security vulnerabilities
2013-11-18 00:00:00
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
49.5%
Related for CVE-2013-5472