CVEvulnerability
CVE-2013-5552
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.
Affected configurations
• cisco ios (<= 12.4\(24\)mdb14)
• cisco ios 12.4\(24\)md
• cisco ios 12.4\(24\)md1
• cisco ios 12.4\(24\)md2
• cisco ios 12.4\(24\)md3
• cisco ios 12.4\(24\)md4
• cisco ios 12.4\(24\)md5
• cisco ios 12.4\(24\)md5a
• cisco ios 12.4\(24\)md6
• cisco ios 12.4\(24\)md7
• cisco ios 12.4\(24\)md8
• cisco ios 12.4\(24\)md9
• cisco ios 12.4\(24\)mda6
• cisco ios 12.4\(24\)mda7
• cisco ios 12.4\(24\)mda8
• cisco ios 12.4\(24\)mda9
• cisco ios 12.4\(24\)mda10
• cisco ios 12.4\(24\)mda11
• cisco ios 12.4\(24\)mda12
• cisco ios 12.4\(24\)mda13
• cisco ios 12.4\(24\)mdb10
• cisco ios 12.4\(24\)mdb11
• cisco ios 12.4\(24\)mdb12
• cisco ios 12.4\(24\)mdb13
• cisco ios 12.4mda12
• cisco content services gateway
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31715 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31715 Vendor Advisory