CVE-2013-6692

Опубликовано: 22 нояб. 2013

Источник: nvd

CVSS2: 6.3

EPSS Низкий

Описание

Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6692
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=31860
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6692
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=31860
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*

Версия до 3.8s\(.2\) (включая)

cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.8s\(.0\):*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.8s\(.1\):*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00296

Низкий

6.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-6vv4-rrfh-pcgh

github

больше 3 лет назад