CVE-2013-5497: Medium severity cisco intrusion prevention system vulnerability
The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5497?
CVE-2013-5497 is rated as a high-severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2013-5497?
To mitigate CVE-2013-5497, install the latest security updates provided by Cisco for the Intrusion Prevention System.
What systems are affected by CVE-2013-5497?
CVE-2013-5497 affects all versions of the Cisco Intrusion Prevention System.
What type of attack does CVE-2013-5497 facilitate?
CVE-2013-5497 allows remote attackers to create a denial of service condition by manipulating user tokens.
What is the impact of CVE-2013-5497?
The impact of CVE-2013-5497 can lead to intermittent hitches in the MainApp process, disrupting service availability.