high7.8
CVE-2013-1166
Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP AL…
Impact
Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service (card reload) by sending many SIP packets, aka Bug ID CSCuc65609.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Asr 1001 | All versions |
| Cisco | Asr 1002 | All versions |
| Cisco | Asr 1002-X | All versions |
| Cisco | Asr 1002 Fixed Router | All versions |
| Cisco | Asr 1004 | All versions |
| Cisco | Asr 1006 | All versions |
| Cisco | Asr 1023 Router | All versions |
| Cisco | Ios Xe | Versions 3.2.0s, 3.2.1s, 3.2.2s, 3.3.0s, 3.3.1s, 3.3.2s |