Lucene search
HistoryAug 30, 2013 - 8:55 p.m.
CVE-2013-5469
cisco
ios
tcp
implementation
denial of service
vulnerability
nvd
cve-2013-5469
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.1%
The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399.
Affected configurations
Node
ciscoiosMatch-
References
Social References
More
Related
cisco
cisco
Cisco IOS Software TCP ACK Storm Vulnerability
2013-09-03 17:25:13
nvd
nvd
CVE-2013-5469
2013-08-30 20:55:08
prion
prion
Code injection
2013-08-30 20:55:00
cvelist
cvelist
CVE-2013-5469
2013-08-30 20:00:00
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.1%
Related for CVE-2013-5469