CVE-2013-5543

2013-10-3121:55:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-5543

cisco

ios xe

denial of service

remote attack

icmp

tcp

udp

zone-based firewall

zbfw

csctt26470

7 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.2%

JSON

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP or (2) UDP session that is under inspection by the Zone-Based Firewall (ZBFW) component, aka Bug ID CSCtt26470.

CPENameOperatorVersion
cisco:ios_xecisco ios xeeq3.4.0as
cisco:ios_xecisco ios xeeq3.4.0s
cisco:ios_xecisco ios xeeq3.4.1s
cisco:asr_1001cisco asr 1001eq-
cisco:asr_1002cisco asr 1002eq-
cisco:asr_1002-xcisco asr 1002-xeq-
cisco:asr_1004cisco asr 1004eq-
cisco:asr_1006cisco asr 1006eq-
cisco:asr_1023_routercisco asr 1023 routereq-

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	eq	3.4.0as
cisco:ios_xe	cisco ios xe	eq	3.4.0s
cisco:ios_xe	cisco ios xe	eq	3.4.1s
cisco:asr_1001	cisco asr 1001	eq	-
cisco:asr_1002	cisco asr 1002	eq	-
cisco:asr_1002-x	cisco asr 1002-x	eq	-
cisco:asr_1004	cisco asr 1004	eq	-
cisco:asr_1006	cisco asr 1006	eq	-
cisco:asr_1023_router	cisco asr 1023 router	eq	-