7.1

CVE-2013-1167

Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of service (card reload) via packets that are not properly handled during the processing of encapsulation, aka Bug ID CSCtt11558.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version3.2.0s
Cisco ≫ Ios Xe Version3.2.0sg
Cisco ≫ Ios Xe Version3.2.0xo
Cisco ≫ Ios Xe Version3.2.1s
Cisco ≫ Ios Xe Version3.2.1sg
Cisco ≫ Ios Xe Version3.2.2s
Cisco ≫ Ios Xe Version3.2.2sg
Cisco ≫ Ios Xe Version3.2.3sg
Cisco ≫ Ios Xe Version3.2.4sg
Cisco ≫ Ios Xe Version3.3.0s
Cisco ≫ Ios Xe Version3.3.0sg
Cisco ≫ Ios Xe Version3.3.1s
Cisco ≫ Ios Xe Version3.3.1sg
Cisco ≫ Ios Xe Version3.3.2s
Cisco ≫ Ios Xe Version3.3.3s
Cisco ≫ Ios Xe Version3.4.0as
Cisco ≫ Ios Xe Version3.4.0s
Cisco ≫ Ios Xe Version3.4.1s
Cisco ≫ Ios Xe Version3.5.0s
Cisco ≫ Ios Xe Version3.5.1s
Cisco ≫ Ios Xe Version3.5.2s
Cisco ≫ Ios Xe Version3.5.xs
Cisco ≫ Asr 1001 Version-
Cisco ≫ Asr 1002 Version-
Cisco ≫ Asr 1002-x Version-
Cisco ≫ Asr 1004 Version-
Cisco ≫ Asr 1006 Version-
Cisco ≫ Asr 1013 Version-
Cisco ≫ Asr 1023 Router Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.481
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:N/I:N/A:C
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.