« Volver al listado

CVE-2013-1218

Estado: ModificadaAlta (7.8)—

Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (9)

Cisco — ASA 5500-x Series IPS SSP SoftwareCisco — ASA 5585-xCisco — Idsm-2Cisco — Intrusion Prevention SystemCisco — IPS 4345 SensorCisco — IPS 4360 SensorCisco — IPS 4510 SensorCisco — IPS 4520 SensorCisco — IPS NME

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-1218",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-07-18T12:48:56.047",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272."
    },
    {
      "lang": "es",
      "value": "Cisco Intrusion Prevention System (IPS) Software en ASA 5500-X IPS-SSP anterior a v7.1(7)sp1E4 permite a atacantes remotos causar una denegación de servicio (cuelgue del proceso Analysis Engine o reinicio del dispositivo) mediante paquetes (1) IPv4 o (2) IPv6 fragmentados, también conocido como Bug ID CSCue51272."
    }
  ],
  "lastModified": "2026-06-16T23:51:02.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:asa_5500-x_series_ips_ssp_software:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFFF761D-FDCA-4C42-90F7-4ACC4AFDC91E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FB52B55-821B-481B-B0F5-D3EB791C5E20",
              "versionEndIncluding": "7.1"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5585-x:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16AE20C2-C77E-4E04-BF13-A48696E52426"
            },
            {
              "criteria": "cpe:2.3:h:cisco:idsm-2:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27B1C50D-71C6-44C6-8358-6CEADFF764BF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4345_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60A11416-D90F-45DB-AD42-A24C724129A9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4360_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C566775-ED73-4A5C-BCA9-F2C9C1B6A028"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4510_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0E986EA-86DC-42F7-91DA-D98E442AD26C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4520_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "836AE393-0005-41C6-B784-9A8045296725"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_nme:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C5FD488-E20E-4622-8536-EACAF3B5D37E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}