CVE-2013-3410
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| cisco | intrusion_prevention_system | {"endIncluding":"7.0\\(8\\)e4"} | |
| cisco | intrusion_prevention_system | 7.0 | |
| cisco | intrusion_prevention_system | 7.0\(1\)e3 | |
| cisco | intrusion_prevention_system | 7.0\(2\)e3 | |
| cisco | intrusion_prevention_system | 7.0\(2\)e4 | |
| cisco | intrusion_prevention_system | 7.0\(3\)e4 | |
| cisco | intrusion_prevention_system | 7.0\(4\)e4 | |
| cisco | intrusion_prevention_system | 7.0\(5a\)e4 | |
| cisco | intrusion_prevention_system | 7.0\(6\)e4 | |
| cisco | intrusion_prevention_system | 7.0\(7\)e4 | |
References
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.