CVE-2013-1241: Medium severity Cisco IOS vulnerability
Published May 8, 2013
·Updated
The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025.
Affected Software
27 affected components
Cisco IOS
Cisco 1921 Integrated Services Router
Cisco 1941 Integrated Services Router
Cisco 1941w Integrated Services Router
Cisco 2901 Integrated Services Router
Cisco 2911 Integrated Services Router
Cisco 2921 Integrated Services Router
Cisco 2951 Integrated Services Router
Cisco 3925 Integrated Services Router
Cisco 3925e Integrated Services Router
Cisco 3945 Integrated Services Router
Cisco 3945e Integrated Services Router
Cisco 861 Integrated Services Router
Cisco 867 Integrated Services Router
Cisco 880 3g Integrated Services Router
Cisco 881 Integrated Services Router
Cisco 886 Integrated Services Router
Cisco 886va-w Integrated Services Router
Cisco 886va Integrated Services Router
Cisco 887 Integrated Services Router
Cisco 887v Integrated Services Router
Cisco 887va-w Integrated Services Router
Cisco 887va Integrated Services Router
Cisco 888 Integrated Services Router
Cisco 891 Integrated Services Router
Cisco 892 Integrated Services Router
Cisco C881w Integrated Services Router
Event History
May 8, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1241?
CVE-2013-1241 is classified as a denial of service vulnerability.
2
How do I fix CVE-2013-1241?
To remediate CVE-2013-1241, update to a fixed version of Cisco IOS as provided in the Cisco security advisory.
3
What devices are affected by CVE-2013-1241?
CVE-2013-1241 affects various Cisco ISR G2 routers, including models like the 1921, 2901, and 3945.
4
Can CVE-2013-1241 be exploited remotely?
Yes, CVE-2013-1241 can be exploited by remote authenticated users.
5
What is the impact of exploiting CVE-2013-1241?
Exploiting CVE-2013-1241 can lead to a denial of service condition, resulting in module reload.