CVE-2013-1165

2013-04-1110:55:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

ios

denial of service

vulnerability

cve-2013-1165

asr

nvd

6.8 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.2%

JSON

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by sending many crafted L2TP packets, aka Bug ID CSCtz23293.

CPENameOperatorVersion
cisco:ios_xecisco ios xele3.4.3s
cisco:ios_xecisco ios xeeq2.1.0
cisco:ios_xecisco ios xeeq2.1.1
cisco:ios_xecisco ios xeeq2.1.2
cisco:ios_xecisco ios xeeq2.2.1
cisco:ios_xecisco ios xeeq2.2.2
cisco:ios_xecisco ios xeeq2.2.3
cisco:ios_xecisco ios xeeq2.3.0
cisco:ios_xecisco ios xeeq2.3.1
cisco:ios_xecisco ios xeeq2.3.1t

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	le	3.4.3s
cisco:ios_xe	cisco ios xe	eq	2.1.0
cisco:ios_xe	cisco ios xe	eq	2.1.1
cisco:ios_xe	cisco ios xe	eq	2.1.2
cisco:ios_xe	cisco ios xe	eq	2.2.1
cisco:ios_xe	cisco ios xe	eq	2.2.2
cisco:ios_xe	cisco ios xe	eq	2.2.3
cisco:ios_xe	cisco ios xe	eq	2.3.0
cisco:ios_xe	cisco ios xe	eq	2.3.1
cisco:ios_xe	cisco ios xe	eq	2.3.1t