4.3
CVSSv2

CVE-2013-6694

Published: 22/11/2013 Updated: 25/11/2013
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The IPSec implementation in Cisco IOS allows remote malicious users to cause a denial of service (MTU change and tunnel-session drop) via crafted ICMP packets, aka Bug ID CSCul29918.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios -

Vendor Advisories

A vulnerability in IPSec tunnel implementation of Cisco IOS Software could allow an unauthenticated, remote attacker to change the tunnel MTU or path MTU and potentially cause IPSec tunnels to drop The vulnerability is due to incorrect processing of certain ICMP packets An attacker could exploit this vulnerability by sending specific ICMP packet ...