NetSight
high7.8

CVE-2013-5543

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICM…

Impact

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP or (2) UDP session that is under inspection by the Zone-Based Firewall (ZBFW) component, aka Bug ID CSCtt26470.

Affected products

VendorProductAffected versions
CiscoIos Xe
Versions 3.4.0as, 3.4.0s, 3.4.1s
CiscoAsr 1001
All versions
CiscoAsr 1002
All versions
CiscoAsr 1002-X
All versions
CiscoAsr 1004
All versions
CiscoAsr 1006
All versions
CiscoAsr 1023 Router
All versions

Weakness classification

References