CVE-2013-5473

Published: Sep 27, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011.

Affected (8)

Products: Cisco: Ios, Ios Xe

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.2
Cisco Ios	Version 15.1
Cisco Ios	Version 15.2

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 3.4.2s
Cisco Ios Xe	Version 3.4.3s
Cisco Ios Xe	Version 3.4.4s
Cisco Ios Xe	Version 3.4.5s
Cisco Ios Xe	Version 3.6.0s

Related CWEs

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ike

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ike

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.