7.8
CVSSv2

CVE-2013-1166

Published: 11/04/2013 Updated: 05/10/2021
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Cisco IOS XE 3.2 up to and including 3.4 prior to 3.4.5S, and 3.5 up to and including 3.7 prior to 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote malicious users to cause a denial of service (card reload) by sending many SIP packets, aka Bug ID CSCuc65609.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco asr 1001 -

cisco asr 1002 -

cisco asr 1002-x -

cisco asr 1002 fixed router -

cisco asr 1004 -

cisco asr 1006 -

cisco asr 1023 router -

cisco ios xe 3.2.0s

cisco ios xe 3.2.1s

cisco ios xe 3.2.2s

cisco ios xe 3.3.0s

cisco ios xe 3.3.1s

cisco ios xe 3.3.2s

cisco ios xe 3.4.0as

cisco ios xe 3.4.0s

cisco ios xe 3.4.1s

cisco ios xe 3.4.2s

cisco ios xe 3.4.3s

cisco ios xe 3.4.4s

cisco ios xe 3.7.0s

Vendor Advisories

Cisco IOS XE Software for 1000 Series Aggregation Services Routers (ASR) contains the following denial of service (DoS) vulnerabilities: Cisco IOS XE Software IPv6 Multicast Traffic Denial of Service Vulnerability Cisco IOS XE Software MVPNv6 Traffic Denial of Service Vulnerability Cisco IOS XE Software L2TP Traffic Denial of Service ...