5
CVSSv2

CVE-2014-0669

Published: 22/01/2014 Updated: 29/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote malicious users to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco asr 5000 series software -

Vendor Advisories

A vulnerability in the Wireless Session Protocol (WSP) function of Cisco ASR 5000 Series Gateway GPRS Support Node (GGSN) could allow an unauthenticated, remote attacker to browse free of charge instead of being redirected to a Top-Up portal The vulnerability is due to incorrect processing of certain WSP packets An attacker could exploit this v ...