Lucene search
HistorySep 27, 2013 - 10:08 a.m.
CVE-2013-5472
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
High
EPSS
0.002
Percentile
53.2%
The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service (device reload) by leveraging an MSDP peer relationship, aka Bug ID CSCuc81226.
Affected configurations
Node
ciscoios_xeMatch2.1.0
ORciscoios_xeMatch2.1.1
ORciscoios_xeMatch2.1.2
ORciscoios_xeMatch2.2.1
ORciscoios_xeMatch2.2.2
ORciscoios_xeMatch2.2.3
ORciscoios_xeMatch2.3.0
ORciscoios_xeMatch2.3.1
ORciscoios_xeMatch2.3.1t
ORciscoios_xeMatch2.3.2
ORciscoios_xeMatch2.4.0
ORciscoios_xeMatch2.4.1
ORciscoios_xeMatch2.4.2
ORciscoios_xeMatch2.4.3
ORciscoios_xeMatch2.4.4
ORciscoios_xeMatch2.5.0
ORciscoios_xeMatch2.5.1
ORciscoios_xeMatch2.5.2
ORciscoios_xeMatch2.6.0
ORciscoios_xeMatch2.6.1
ORciscoios_xeMatch2.6.2
ORciscoios_xeMatch3.1.0s
ORciscoios_xeMatch3.1.0sg
ORciscoios_xeMatch3.1.1s
ORciscoios_xeMatch3.1.1sg
ORciscoios_xeMatch3.1.2s
ORciscoios_xeMatch3.1.3s
ORciscoios_xeMatch3.1.4s
ORciscoios_xeMatch3.2.00.xo.15.0\(2\)xo
ORciscoios_xeMatch3.2.0s
ORciscoios_xeMatch3.2.0sg
ORciscoios_xeMatch3.2.0xo
ORciscoios_xeMatch3.2.1s
ORciscoios_xeMatch3.2.1sg
ORciscoios_xeMatch3.2.2s
ORciscoios_xeMatch3.2.2sg
ORciscoios_xeMatch3.2.3sg
ORciscoios_xeMatch3.2.4sg
ORciscoios_xeMatch3.3.0s
ORciscoios_xeMatch3.3.0sg
Node
ciscoiosMatch12.0
ORciscoiosMatch12.1
ORciscoiosMatch12.2
ORciscoiosMatch12.3
ORciscoiosMatch12.4
ORciscoiosMatch15.0
ORciscoiosMatch15.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios_xe | 2.1.0 | cpe:2.3:o:cisco:ios_xe:2.1.0:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.1.1 | cpe:2.3:o:cisco:ios_xe:2.1.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.1.2 | cpe:2.3:o:cisco:ios_xe:2.1.2:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.2.1 | cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.2.2 | cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.2.3 | cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.0 | cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.1 | cpe:2.3:o:cisco:ios_xe:2.3.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.1t | cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:* |
| cisco | ios_xe | 2.3.2 | cpe:2.3:o:cisco:ios_xe:2.3.2:*:*:*:*:*:*:* |
Related
nessus
nessus
prion
prion
Code injection
2013-09-27 10:08:00
cve
cve
CVE-2013-5472
2013-09-27 10:08:04
cisco
cisco
cvelist
cvelist
CVE-2013-5472
2013-09-27 10:00:00
securityvulns
securityvulns
Cisco IOS multiple security vulnerabilities
2013-11-18 00:00:00
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
High
EPSS
0.002
Percentile
53.2%
Related for NVD:CVE-2013-5472