CVE-2013-1241 : Detail

CVE-2013-1241

Authorization problems
A07-Identif. and Authent. Fail
0.11%V3
Network
2013-05-08
10h00 +00:00
2024-09-16
17h43 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Metrics

Metrics Score Severity CVSS Vector Source
V2 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Cisco>>Ios >> Version -

Cisco>>1921_integrated_services_router >> Version -

Cisco>>1941_integrated_services_router >> Version -

Cisco>>1941w_integrated_services_router >> Version -

Cisco>>2901_integrated_services_router >> Version -

Cisco>>2911_integrated_services_router >> Version -

Cisco>>2921_integrated_services_router >> Version -

Cisco>>2951_integrated_services_router >> Version -

Cisco>>3925_integrated_services_router >> Version -

Cisco>>3925e_integrated_services_router >> Version -

Cisco>>3945_integrated_services_router >> Version -

Cisco>>3945e_integrated_services_router >> Version -

Cisco>>861_integrated_services_router >> Version -

Cisco>>867_integrated_services_router >> Version -

Cisco>>880_3g_integrated_services_router >> Version -

Cisco>>881_integrated_services_router >> Version -

Cisco>>886_integrated_services_router >> Version -

Cisco>>886va-w_integrated_services_router >> Version -

Cisco>>886va_integrated_services_router >> Version -

Cisco>>887_integrated_services_router >> Version -

Cisco>>887v_integrated_services_router >> Version -

Cisco>>887va-w_integrated_services_router >> Version -

Cisco>>887va_integrated_services_router >> Version -

Cisco>>888_integrated_services_router >> Version -

Cisco>>891_integrated_services_router >> Version -

Cisco>>892_integrated_services_router >> Version -

Cisco>>C881w_integrated_services_router >> Version -

References