CVE-2013-5552

EPSS 0.16%
Veröffentlicht 13.11.2013 15:55:03
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Version <= 12.4\(24\)mdb14

Cisco ≫ Ios Version12.4mda12

Cisco ≫ Content Services Gateway Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.328

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=31715

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-5552

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5552

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5552

EUVD