CVE-2013-1100: Medium severity Cisco IOS vulnerability
Published Feb 13, 2013
·Updated
The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.
Affected Software
97 affected components
Cisco IOS
Cisco Catalyst 2820
Cisco Catalyst 2820=9.0_0.07
Cisco Catalyst 2900
Cisco Catalyst 2900=lre_xl
Cisco Catalyst 2900=xl
Cisco Catalyst 2900 Vlan
Cisco Catalyst 2900xl
Cisco Catalyst 2901
Cisco Catalyst 2902
Cisco Catalyst 2920
Cisco Catalyst 2926
Cisco Catalyst 2926f
Cisco Catalyst 2926gl
Cisco Catalyst 2926gs
Cisco Catalyst 2926t
Cisco Catalyst 2940
Cisco Catalyst 2948
Cisco Catalyst 2948-ge-tx
Cisco Catalyst 2948g
Cisco Catalyst 2948g-l3
Cisco Catalyst 2950
Cisco Catalyst 2950 Lre
Cisco Catalyst 2955
Cisco Catalyst 2970
Cisco Catalyst 2980g
Cisco Catalyst 2980g-a
Cisco Catalyst 3000
Cisco Catalyst 3200
Cisco Catalyst 3500
Cisco Catalyst 3500 Xl
Cisco Catalyst 3500xl
Cisco Catalyst 3550
Cisco Catalyst 3560
Cisco Catalyst 3560-e
Cisco Catalyst 3560-x
Cisco Catalyst 3750
Cisco Catalyst 3750-e
Cisco Catalyst 3750-x
Cisco Catalyst 3750 Metro
Cisco Catalyst 3750G
Cisco Catalyst 3900
Cisco Catalyst 4000
Cisco Catalyst 4200
Cisco Catalyst 4224
Cisco Catalyst 4232
Cisco Catalyst 4232-13
Cisco Catalyst 4500
Cisco Catalyst 4503
Cisco Catalyst 4506
Cisco Catalyst 4507r
Cisco Catalyst 4510r
Cisco Catalyst 4840g
Cisco Catalyst 4908g-l3
Cisco Catalyst 4912g
Cisco Catalyst 4948
Cisco Catalyst 5000
Cisco Catalyst 5500
Cisco Catalyst 5505
Cisco Catalyst 5509
Cisco Catalyst 6000
Cisco Catalyst 6000 Ws-svc-nam-1=2.2\(1a\)
Cisco Catalyst 6000 Ws-svc-nam-1=3.1\(1a\)
Cisco Catalyst 6000 Ws-svc-nam-2=2.2\(1a\)
Cisco Catalyst 6000 Ws-svc-nam-2=3.1\(1a\)
Cisco Catalyst 6000 Ws-x6380-nam=2.1\(2\)
Cisco Catalyst 6000 Ws-x6380-nam=3.1\(1a\)
Cisco Catalyst 6500
Cisco Catalyst 6500 Ws-svc-nam-1=2.2\(1a\)
Cisco Catalyst 6500 Ws-svc-nam-1=3.1\(1a\)
Cisco Catalyst 6500 Ws-svc-nam-2=2.2\(1a\)
Cisco Catalyst 6500 Ws-svc-nam-2=3.1\(1a\)
Cisco Catalyst 6500 Ws-x6380-nam=2.1\(2\)
Cisco Catalyst 6500 Ws-x6380-nam=3.1\(1a\)
Cisco Catalyst 6503-e
Cisco Catalyst 6504-e
Cisco Catalyst 6506-e
Cisco Catalyst 6509-e
Cisco Catalyst 6509-neb-a
Cisco Catalyst 6509-v-e
Cisco Catalyst 6513
Cisco Catalyst 6513-e
Cisco Catalyst 6608
Cisco Catalyst 6624
Cisco Catalyst 7600
Cisco Catalyst 7600 Ws-svc-nam-1=2.2\(1a\)
Cisco Catalyst 7600 Ws-svc-nam-1=3.1\(1a\)
Cisco Catalyst 7600 Ws-svc-nam-2=2.2\(1a\)
Cisco Catalyst 7600 Ws-svc-nam-2=3.1\(1a\)
Cisco Catalyst 7600 Ws-x6380-nam=2.1\(2\)
Cisco Catalyst 7600 Ws-x6380-nam=3.1\(1a\)
Cisco Catalyst 8500
Cisco Catalyst 8510csr
Cisco Catalyst 8510msr
Cisco Catalyst 8540csr
Cisco Catalyst 8540msr
Cisco Catalyst Ws-c2924-xl
Event History
Feb 13, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1100?
CVE-2013-1100 has been rated as a medium severity issue due to its potential to cause a denial of service.
2
How does CVE-2013-1100 affect Cisco devices?
CVE-2013-1100 allows remote attackers to crash affected Cisco IOS devices by sending crafted packets to TCP ports 80 or 443.
3
How do I fix CVE-2013-1100?
To address CVE-2013-1100, apply the appropriate security patches or updates provided by Cisco for affected IOS versions.
4
Which Cisco devices are impacted by CVE-2013-1100?
CVE-2013-1100 affects Cisco IOS running on various Catalyst switches.
5
Can CVE-2013-1100 be exploited remotely?
Yes, CVE-2013-1100 can be exploited remotely by sending specially crafted packets.