Lucene search

K
cve[email protected]CVE-2013-6686
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-6686

2022-10-0316:14:52
CWE-20
web.nvd.nist.gov
18
cisco
ios
ssl
vpn
denial of service
crafted packets
dtls
security vulnerability
nvd
cve-2013-6686

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

The SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users to cause a denial of service (interface queue wedge) via crafted DTLS packets in an SSL session, aka Bug IDs CSCuh97409 and CSCud90568.

Affected configurations

NVD
Node
ciscoiosRange15.3
OR
ciscoiosMatch15.0
OR
ciscoiosMatch15.0\(1\)se
OR
ciscoiosMatch15.1
OR
ciscoiosMatch15.2

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

Related for CVE-2013-6686