MEDIUM · 5.4

CVE-2013-1100

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port ...

Vulnerability Description

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.

CVSS Score

5.4

MEDIUM

AV:N/AC:H/Au:N/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoIos-
CiscoCatalyst 2820All versions
CiscoCatalyst 2900All versions
CiscoCatalyst 2900 VlanAll versions
CiscoCatalyst 2900XlAll versions
CiscoCatalyst 2901All versions
CiscoCatalyst 2902All versions
CiscoCatalyst 2920All versions
CiscoCatalyst 2926All versions
CiscoCatalyst 2926FAll versions
CiscoCatalyst 2926GlAll versions
CiscoCatalyst 2926GsAll versions
CiscoCatalyst 2926TAll versions
CiscoCatalyst 2940All versions
CiscoCatalyst 2948All versions
CiscoCatalyst 2948-Ge-TxAll versions
CiscoCatalyst 2948GAll versions
CiscoCatalyst 2948G-L3All versions
CiscoCatalyst 2950All versions
CiscoCatalyst 2950 LreAll versions

Related Weaknesses (CWE)

References

FAQ

What is CVE-2013-1100?

CVE-2013-1100 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port ...

How severe is CVE-2013-1100?

CVE-2013-1100 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-1100?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios, Cisco Catalyst 2820, Cisco Catalyst 2900, Cisco Catalyst 2900 Vlan, Cisco Catalyst 2900Xl.