Vulnerability in Cisco Catalyst_2820

CVE-2013-1100

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc5385…

EPSS: 0.006 (70.8th percentile) — read the EPSS interpretation.

Affected products

Cisco Catalyst_2820 — versions 9.0_0.07
Cisco Catalyst_2900 — versions lre_xl, xl
Cisco Catalyst_2900_vlan
Cisco Catalyst_2900xl
Cisco Catalyst_2901
Cisco Catalyst_2902
Cisco Catalyst_2920
Cisco Catalyst_2926
Cisco Catalyst_2926f
Cisco Catalyst_2926gl

Weakness classification (CWE)

CWE-399

References

20130130 Cisco IOS Software HTTP Server Denial of Service Vulnerability (x_refsource_CISCO, vendor-advisory)