7.8
CVSSv2

CVE-2013-1166

Published: 11/04/2013 Updated: 05/10/2021
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Cisco IOS XE 3.2 up to and including 3.4 prior to 3.4.5S, and 3.5 up to and including 3.7 prior to 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote malicious users to cause a denial of service (card reload) by sending many SIP packets, aka Bug ID CSCuc65609.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco asr_1004 -

cisco asr_1002 -

cisco asr_1002_fixed_router -

cisco asr_1002-x -

cisco asr_1006 -

cisco asr_1001 -

cisco asr_1023_router -

cisco ios_xe 3.4.4s

cisco ios_xe 3.4.1s

cisco ios_xe 3.4.0s

cisco ios_xe 3.7.0s

cisco ios_xe 3.4.3s

cisco ios_xe 3.2.0s

cisco ios_xe 3.2.1s

cisco ios_xe 3.4.2s

cisco ios_xe 3.2.2s

cisco ios_xe 3.3.1s

cisco ios_xe 3.4.0as

cisco ios_xe 3.3.0s

cisco ios_xe 3.3.2s

Vendor Advisories

Cisco IOS XE Software for 1000 Series Aggregation Services Routers (ASR) contains the following denial of service (DoS) vulnerabilities: Cisco IOS XE Software IPv6 Multicast Traffic Denial of Service Vulnerability Cisco IOS XE Software MVPNv6 Traffic Denial of Service Vulnerability Cisco IOS XE Software L2TP Traffic Denial of Service ...