7.8
CVSSv2

CVE-2013-1148

Published: 28/03/2013 Updated: 29/03/2013
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS up to and including 3.4.xS prior to 3.4.5S and 3.5.xS up to and including 3.7.xS prior to 3.7.2S allows remote malicious users to cause a denial of service (device reload) via crafted (1) IPv4 or (2) IPv6 IP SLA packets on UDP port 1167, aka Bug ID CSCuc72594.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios 15.2

cisco ios xe 3.1.0s

cisco ios xe 3.1.1s

cisco ios xe 3.4.3s

cisco ios xe 3.1.2s

cisco ios xe 3.1.4s

cisco ios xe 3.2.1s

cisco ios xe 3.3.1s

cisco ios xe 3.4.1s

cisco ios xe 3.2.2s

cisco ios xe 3.3.2s

cisco ios xe 3.3.3s

cisco ios xe 3.3.0s

cisco ios xe 3.1.3s

cisco ios xe 3.2.0s

cisco ios xe 3.4.0s

cisco ios xe 3.4.2s

cisco ios xe 3.5.0s

cisco ios xe 3.5.1s

cisco ios xe 3.5.2s

Vendor Advisories

<!--- IP SLA 010-summary 04 ---> The Cisco IOS Software implementation of the IP Service Level Agreement (IP SLA) feature contains a vulnerability in the validation of IP SLA packets that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Cisco has released software updates that address this vulnerabili ...