« Volver al listado

CVE-2013-3410

Estado: ModificadaAlta (7.8)—

Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — Intrusion Prevention SystemCisco — IPS NME

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3410",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-07-18T12:48:56.953",
  "references": [
    {
      "url": "http://secunia.com/advisories/54243",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/54243",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977."
    },
    {
      "lang": "es",
      "value": "Cisco Intrusion Prevention System (IPS) Software en dispositivos IPS NME anterior a  v7.0(9)E4 permite a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) mediante paquetes IPv4 malformados que lanzan una incorrecta asignación de memoria, también conocido con el bug ID CSCua61977."
    }
  ],
  "lastModified": "2026-06-16T23:55:02.777",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCD4BC15-7211-4DE7-A1CD-A95515A66FD6",
              "versionEndIncluding": "7.0\\(8\\)e4"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03105E7F-12F8-4497-8A27-BD2F1653FD38"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(1\\)e3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32F57CD3-EA32-4814-A021-3CEB23900E18"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(2\\)e3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDCEF522-431E-49D3-84F8-24EBE0D03E0B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(2\\)e4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5961030A-ADD4-4BA6-A691-275DE6D9E1B2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(3\\)e4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21F422BC-E40B-4EC6-B0A5-7CD3A3C92B4A"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(4\\)e4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04BA1FCB-DF1B-42E5-BBF3-808119AF80ED"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(5a\\)e4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6074CC8-4A49-4A31-809F-B87E4B80D179"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(6\\)e4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20548D0B-8B3C-468F-8966-13019C4D69C6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(7\\)e4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3206DA6-FE23-4214-A1F8-3C212C2768BB"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ips_nme:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C5FD488-E20E-4622-8536-EACAF3B5D37E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}