Vulnerability in Cisco iOS

CVE-2013-5473

Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011.

EPSS: 0.020 (78.3th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.2, 15.1, 15.2
  • Cisco Ios_xe — versions 3.4.2s, 3.4.3s, 3.4.4s
  • N/a — versions n/a

Weakness classification (CWE)

References