Lucene search
CiscoCVE-2013-5543HistoryOct 31, 2013 - 9:55 p.m.
CVE-2013-5543
2013-10-3121:55:02
CWE-20
cisco
web.nvd.nist.gov
27
cve-2013-5543
cisco
ios xe
denial of service
remote attack
icmp
tcp
udp
zone-based firewall
zbfw
csctt26470
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
49.5%
Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP or (2) UDP session that is under inspection by the Zone-Based Firewall (ZBFW) component, aka Bug ID CSCtt26470.
Affected configurations
Node
ciscoios_xeMatch3.4.0as
ORciscoios_xeMatch3.4.0s
ORciscoios_xeMatch3.4.1s
ciscoasr_1001Match-
ORciscoasr_1002Match-
ORciscoasr_1002-xMatch-
ORciscoasr_1004Match-
ORciscoasr_1006Match-
ORciscoasr_1023_routerMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios_xe | 3.4.0as | cpe:2.3:o:cisco:ios_xe:3.4.0as:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.4.0s | cpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.4.1s | cpe:2.3:o:cisco:ios_xe:3.4.1s:*:*:*:*:*:*:* |
| cisco | asr_1001 | - | cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:* |
| cisco | asr_1002 | - | cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:* |
| cisco | asr_1002-x | - | cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:* |
| cisco | asr_1004 | - | cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:* |
| cisco | asr_1006 | - | cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:* |
| cisco | asr_1023_router | - | cpe:2.3:h:cisco:asr_1023_router:-:*:*:*:*:*:*:* |
Related
prion
prion
Sql injection
2013-10-31 21:55:00
nvd
nvd
CVE-2013-5543
2013-10-31 21:55:02
cvelist
cvelist
CVE-2013-5543
2013-10-31 21:00:00
cisco
cisco
nessus
nessus
securityvulns
securityvulns
Cisco IOS multiple security vulnerabilities
2013-11-18 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
49.5%
Related for CVE-2013-5543