CVEvulnerability

CVE-2013-1241

6.3 MEDIUM Published 2013-05-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.3 MEDIUM — AV:N/AC:M/Au:S/C:N/I:N/A:C
Weaknesses
CWE-287

Description

The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025.

Affected configurations

• cisco ios • cisco 1921 integrated services router • cisco 1941 integrated services router • cisco 1941w integrated services router • cisco 2901 integrated services router • cisco 2911 integrated services router • cisco 2921 integrated services router • cisco 2951 integrated services router • cisco 3925 integrated services router • cisco 3925e integrated services router • cisco 3945 integrated services router • cisco 3945e integrated services router • cisco 861 integrated services router • cisco 867 integrated services router • cisco 880 3g integrated services router • cisco 881 integrated services router • cisco 886 integrated services router • cisco 886va-w integrated services router • cisco 886va integrated services router • cisco 887 integrated services router • cisco 887v integrated services router • cisco 887va-w integrated services router • cisco 887va integrated services router • cisco 888 integrated services router • cisco 891 integrated services router • cisco 892 integrated services router • cisco c881w integrated services router

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References