CVE-2013-5473: High severity cisco ios vulnerability

Published Sep 27, 2013

Updated

Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011.

Affected Software

8 affected components

cisco IOS=12.2

cisco IOS=15.1

cisco IOS=15.2

Cisco IOS XE=3.4.2s

Cisco IOS XE=3.4.3s

Cisco IOS XE=3.4.4s

Cisco IOS XE=3.4.5s

Cisco IOS XE=3.6.0s

Event History

Sep 27, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5473?

CVE-2013-5473 has a severity rating that allows remote attackers to cause a denial of service.

How do I fix CVE-2013-5473?

To fix CVE-2013-5473, upgrade to a version of Cisco IOS or IOS XE that is not vulnerable, specifically versions above 12.2, 15.1, 15.2, and 3.6.1S.

Which Cisco IOS versions are affected by CVE-2013-5473?

CVE-2013-5473 affects Cisco IOS versions 12.2, 15.1, 15.2, and specific IOS XE versions before 3.6.1S.

What kind of attack does CVE-2013-5473 allow?

CVE-2013-5473 allows remote attackers to exploit a memory leak leading to device reload or denial of service through malformed IKEv1 packets.

Can CVE-2013-5473 be exploited remotely?

Yes, CVE-2013-5473 can be exploited remotely through the sending of malformed IKEv1 packets.