1. Home
  2. CVE Database
  3. CVE-2013-5543
HIGH · 7.8

CVE-2013-5543

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP...

Vulnerability Description

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP or (2) UDP session that is under inspection by the Zone-Based Firewall (ZBFW) component, aka Bug ID CSCtt26470.

CVSS Score

7.8

HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoIos Xe3.4.0as
CiscoAsr 1001-
CiscoAsr 1002-
CiscoAsr 1002-X-
CiscoAsr 1004-
CiscoAsr 1006-
CiscoAsr 1023 Router-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2013-5543?

CVE-2013-5543 is a vulnerability with a CVSS score of 7.8 (HIGH). Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP...

How severe is CVE-2013-5543?

CVE-2013-5543 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-5543?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco Asr 1001, Cisco Asr 1002, Cisco Asr 1002-X, Cisco Asr 1004.