‹ Volver al listado

CVE-2013-5469

Estado: ModificadaAlta (7.1)—
Gravedad7.1Alta · CVSS 2.0
Probabilidad de explotación2.36 %mayor que el 84 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado

La implementación TCP en Cisco IOS no implementa adecuadamente las transiciones desde el estado ESTABLISHED al CLOSED, lo que permite a atacantes remotos provocar una denegación de servicio (inundación de paquetes ACK) a través de una serie de paquetes ACK y FIN manipulados. Aka Bug ID CSCtz14399.

CVSS

Puntuación base
7.1
Versión
2.0
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:C

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días
2.36 %
Percentil entre todas las CVEs puntuadas
84
Fecha de la puntuación
20/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — IOS

CWE

Referencias

Mostrar las 10 referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-5469",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-08-30T20:55:08.737",
  "references": [
    {
      "url": "http://osvdb.org/96764",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5469",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/62083",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1028969",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86794",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/96764",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5469",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/62083",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1028969",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86794",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399."
    },
    {
      "lang": "es",
      "value": "La implementación TCP en Cisco IOS no implementa adecuadamente las transiciones desde el estado ESTABLISHED al CLOSED, lo que permite a atacantes remotos provocar una denegación de servicio (inundación de paquetes ACK) a través de una serie de paquetes ACK y FIN manipulados. Aka Bug ID CSCtz14399."
    }
  ],
  "lastModified": "2026-06-16T23:58:52.210",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6230A85-30D2-4934-A8A0-11499B7B09F8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}