CVE-2013-1167

EUVD-2013-1207
Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of service (card reload) via packets that are not properly handled during the processing of encapsulation, aka Bug ID CSCtt11558.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
ciscoios_xe
3.2.00.xo.15.0\(2\)xo:xo.15
ciscoios_xe
3.2.0s:s
ciscoios_xe
3.2.0sg:sg
ciscoios_xe
3.2.0xo:xo
ciscoios_xe
3.2.1s:s
ciscoios_xe
3.2.1sg:sg
ciscoios_xe
3.2.2s:s
ciscoios_xe
3.2.2sg:sg
ciscoios_xe
3.2.3sg:sg
ciscoios_xe
3.2.4sg:sg
ciscoios_xe
3.3.0s:s
ciscoios_xe
3.3.0sg:sg
ciscoios_xe
3.3.1s:s
ciscoios_xe
3.3.1sg:sg
ciscoios_xe
3.3.2s:s
ciscoios_xe
3.3.3s:s
ciscoios_xe
3.4.0as:as
ciscoios_xe
3.4.0s:s
ciscoios_xe
3.4.1s:s
ciscoios_xe
3.5.0s:s
ciscoios_xe
3.5.1s:s
ciscoios_xe
3.5.2s:s
ciscoios_xe
3.5.xs:xs
ciscoasr_1001
-
ciscoasr_1002
-
ciscoasr_1002-x
-
ciscoasr_1002_fixed_router
-
ciscoasr_1004
-
ciscoasr_1006
-
ciscoasr_1013
-
ciscoasr_1023_router
-
𝑥
= Vulnerable software versions