medium6.4
CVE-2013-5552
Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote at…
Impact
Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios | through 12.4\(24\)mdb14 Versions 12.4\(24\)md, 12.4\(24\)md1, 12.4\(24\)md2, 12.4\(24\)md3, 12.4\(24\)md4 |
| Cisco | Content Services Gateway | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31715
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31715