CVE-2013-5552

Published: Nov 13, 2013Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.

Affected (26)

Products: Cisco: Ios, Content Services Gateway

Cisco

2 products

Ios

Content Services Gateway

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Up to 12.4\(24\)mdb14
Cisco Ios	Version 12.4(24)md1
Cisco Ios	Version 12.4(24)md2
Cisco Ios	Version 12.4(24)md3
Cisco Ios	Version 12.4(24)md4
Cisco Ios	Version 12.4(24)md5
Cisco Ios	Version 12.4(24)md5a
Cisco Ios	Version 12.4(24)md6
Cisco Ios	Version 12.4(24)md7
Cisco Ios	Version 12.4(24)md8
Cisco Ios	Version 12.4(24)md9
Cisco Ios	Version 12.4(24)md
Cisco Ios	Version 12.4(24)mda10
Cisco Ios	Version 12.4(24)mda11
Cisco Ios	Version 12.4(24)mda12
Cisco Ios	Version 12.4(24)mda13
Cisco Ios	Version 12.4(24)mda6
Cisco Ios	Version 12.4(24)mda7
Cisco Ios	Version 12.4(24)mda8
Cisco Ios	Version 12.4(24)mda9
Cisco Ios	Version 12.4(24)mdb10
Cisco Ios	Version 12.4(24)mdb11
Cisco Ios	Version 12.4(24)mdb12
Cisco Ios	Version 12.4(24)mdb13
Cisco Ios	Version 12.4mda12
Cisco Content Services Gateway	All versions

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=31715

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=31715

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.