7.8
CVSSv2

CVE-2013-5546

Published: 31/10/2013 Updated: 05/10/2021
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The TCP reassembly feature in Cisco IOS XE 3.7 prior to 3.7.3S and 3.8 prior to 3.8.1S on 1000 ASR devices allows remote malicious users to cause a denial of service (device reload) via large TCP packets that are processed by the (1) NAT or (2) ALG component, aka Bug ID CSCud72509.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 3.7.0s

cisco ios xe 3.7.1s

cisco ios xe 3.7.2s

cisco ios xe 3.8.0s

cisco asr 1001 -

cisco asr 1002 -

cisco asr 1002-x -

cisco asr 1004 -

cisco asr 1006 -

cisco asr 1023 router -

Vendor Advisories

Cisco IOS XE Software for 1000 Series Aggregation Services Routers (ASR) contains the following denial of service (DoS) vulnerabilities: Cisco IOS XE Software Malformed ICMP Packet Denial of Service Vulnerability Cisco IOS XE Software PPTP Traffic Denial of Service Vulnerability Cisco IOS XE Software TCP Segment Reassembly Denial of S ...