CVE-2013-5498

EPSS 1.29%
Veröffentlicht 27.09.2013 20:55:04
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet streams, aka Bug ID CSCue91963.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Xr

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.29%	0.79

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/97777

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5498

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=30994

Vendor Advisory

http://www.securityfocus.com/bid/62651

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/87462

https://nvd.nist.gov/vuln/detail/CVE-2013-5498

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5498

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5498

EUVD