Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2013-6692
HistoryNov 22, 2013 - 1:55 a.m.

CVE-2013-6692

2013-11-2201:55:04
CWE-399
cisco
web.nvd.nist.gov
26
cisco
ios xe
dhcp
denial of service
cve-2013-6692
nvd
vulnerability
bug id cscuh04949

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.

Affected configurations

Nvd
Node
ciscoios_xeRange≤3.8s\(.2\)
OR
ciscoios_xeMatch3.7.0s
OR
ciscoios_xeMatch3.7.1s
OR
ciscoios_xeMatch3.7.2s
OR
ciscoios_xeMatch3.8.0s
OR
ciscoios_xeMatch3.8s\(.0\)
OR
ciscoios_xeMatch3.8s\(.1\)
VendorProductVersionCPE
ciscoios_xe*cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
ciscoios_xe3.7.0scpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*
ciscoios_xe3.7.1scpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*
ciscoios_xe3.7.2scpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*
ciscoios_xe3.8.0scpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*
ciscoios_xe3.8s(.0)cpe:2.3:o:cisco:ios_xe:3.8s\(.0\):*:*:*:*:*:*:*
ciscoios_xe3.8s(.1)cpe:2.3:o:cisco:ios_xe:3.8s\(.1\):*:*:*:*:*:*:*

Related

prion 1
nessus 1
cvelist 1
cisco 1
nvd 1
prion
prion
Code injection
2013-11-22 01:55:00
nessus
nessus
Cisco IOS XE DHCP AAA Clients DoS (CSCuh04949)
2014-07-29 00:00:00
cvelist
cvelist
CVE-2013-6692
2013-11-22 01:00:00
cisco
cisco
Cisco IOS XE Software AAA DHCP Denial of Service Vulnerability
2013-11-21 20:14:42
nvd
nvd
CVE-2013-6692
2013-11-22 01:55:04

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON
Related for CVE-2013-6692
prion1nessus1cvelist1cisco1nvd1