CVE-2013-5498
 
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet streams, aka Bug ID CSCue91963.
El componente PPTP-ALG en CRS Carrier Grade Services (CGSE) y ASR 9000 Integrated Service Module (ISM) en Cisco IOS XR permite a atacantes remotos causar denegación de servicio (reinicio del módulo) a través de flujos de paquetes manipulados, también conocido como Bug ID CSCue91963.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-08-22 CVE Reserved
- 2013-09-27 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
http://osvdb.org/97777 | Vdb Entry | |
http://www.securityfocus.com/bid/62651 | Third Party Advisory | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/87462 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5498 | 2017-08-29 | |
http://tools.cisco.com/security/center/viewAlert.x?alertId=30994 | 2017-08-29 |