CVE-2013-5477: Input Validation
The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service (interface queue wedge) via bursty network traffic, aka Bug ID CSCub67465.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5477?
CVE-2013-5477 is classified as a denial of service vulnerability that can severely impact device availability.
How do I fix CVE-2013-5477?
To mitigate CVE-2013-5477, upgrade to a non-vulnerable version of Cisco IOS that is not affected by this issue.
What systems are affected by CVE-2013-5477?
CVE-2013-5477 affects Cisco IOS versions 12.2, 15.0, 15.1, 15.2, and 15.3 configured with an HDLC32 driver.
What type of attack does CVE-2013-5477 represent?
CVE-2013-5477 represents a denial of service attack that can disrupt network services through bursty traffic.
Is CVE-2013-5477 exploitable remotely?
Yes, CVE-2013-5477 can be exploited remotely by attackers sending malicious traffic to the vulnerable device.