Auth bypass in Cisco 1921 Integrated Services Router
CVE-2013-1241
The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025.
Vulnerability class: Broken Authentication
EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco 1921_integrated_services_router
- Cisco 1941_integrated_services_router
- Cisco 1941w_integrated_services_router
- Cisco 2901_integrated_services_router
- Cisco 2911_integrated_services_router
- Cisco 2921_integrated_services_router
- Cisco 2951_integrated_services_router
- Cisco 3925e_integrated_services_router
- Cisco 3925_integrated_services_router
- Cisco 3945e_integrated_services_router
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)