Published: 10/10/2013 Updated: 29/08/2017

CVSS v2 Base Score: 5.7 | Impact Score: 6.9 | Exploitability Score: 5.5

VMScore: 507

Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C

The OSPF functionality in Cisco IOS and IOS XE allows remote malicious users to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco ios xe -
cisco ios -

A vulnerability in the OSPF implementation of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device The vulnerability is due to improper parsing of certain options in OSPF link-state advertisement (LSA) type 11 packets An attacker could exploit this vulnerability b ...

CWE-20 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5527 http://osvdb.org/98253 http://www.securityfocus.com/bid/62904 https://exchange.xforce.ibmcloud.com/vulnerabilities/87762 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20131010-CVE-2013-5527

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-5527

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect