Vulnerability in Cisco Content Services Gateway
CVE-2013-5552
Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Content_services_gateway
- Cisco Ios — versions 12.4\(24\)md, 12.4\(24\)md1, 12.4\(24\)md2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)