CVE-2013-5545

2022-10-0316:14:55

CWE-20

cisco

web.nvd.nist.gov

cve-2013-5545

pptp

alg

cisco ios xe

denial of service

nat

bug id cscuh19936

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

49.5%

JSON

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending many PPTP packets over NAT, aka Bug ID CSCuh19936.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.9.0s

ciscoios_xeMatch3.9.1s

AND

ciscoasr_1001Match-

ciscoasr_1002Match-

ciscoasr_1002-xMatch-

ciscoasr_1004Match-

ciscoasr_1006Match-

ciscoasr_1023_routerMatch-

VendorProductVersionCPE
ciscoios_xe3.9.0scpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*
ciscoios_xe3.9.1scpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*
ciscoasr_1001-cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*
ciscoasr_1002-cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*
ciscoasr_1002-x-cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*
ciscoasr_1004-cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*
ciscoasr_1006-cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*
ciscoasr_1023_router-cpe:2.3:h:cisco:asr_1023_router:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.9.0s	cpe:2.3:o:cisco:ios_xe:3.9.0s:::::::*
cisco	ios_xe	3.9.1s	cpe:2.3:o:cisco:ios_xe:3.9.1s:::::::*
cisco	asr_1001	-	cpe:2.3:h:cisco:asr_1001:-:::::::*
cisco	asr_1002	-	cpe:2.3:h:cisco:asr_1002:-:::::::*
cisco	asr_1002-x	-	cpe:2.3:h:cisco:asr_1002-x:-:::::::*
cisco	asr_1004	-	cpe:2.3:h:cisco:asr_1004:-:::::::*
cisco	asr_1006	-	cpe:2.3:h:cisco:asr_1006:-:::::::*
cisco	asr_1023_router	-	cpe:2.3:h:cisco:asr_1023_router:-:::::::*