« Back to list

CVE-2013-1218

Status: ModifiedHigh (7.8)—

Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (9)

Cisco — ASA 5500-x Series IPS SSP SoftwareCisco — ASA 5585-xCisco — Idsm-2Cisco — Intrusion Prevention SystemCisco — IPS 4345 SensorCisco — IPS 4360 SensorCisco — IPS 4510 SensorCisco — IPS 4520 SensorCisco — IPS NME

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2013-1218",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-07-18T12:48:56.047",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272."
    },
    {
      "lang": "es",
      "value": "Cisco Intrusion Prevention System (IPS) Software en ASA 5500-X IPS-SSP anterior a v7.1(7)sp1E4 permite a atacantes remotos causar una denegación de servicio (cuelgue del proceso Analysis Engine o reinicio del dispositivo) mediante paquetes (1) IPv4 o (2) IPv6 fragmentados, también conocido como Bug ID CSCue51272."
    }
  ],
  "lastModified": "2026-06-16T23:51:02.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:asa_5500-x_series_ips_ssp_software:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFFF761D-FDCA-4C42-90F7-4ACC4AFDC91E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FB52B55-821B-481B-B0F5-D3EB791C5E20",
              "versionEndIncluding": "7.1"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5585-x:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16AE20C2-C77E-4E04-BF13-A48696E52426"
            },
            {
              "criteria": "cpe:2.3:h:cisco:idsm-2:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27B1C50D-71C6-44C6-8358-6CEADFF764BF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4345_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60A11416-D90F-45DB-AD42-A24C724129A9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4360_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C566775-ED73-4A5C-BCA9-F2C9C1B6A028"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4510_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0E986EA-86DC-42F7-91DA-D98E442AD26C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_4520_sensor:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "836AE393-0005-41C6-B784-9A8045296725"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ips_nme:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C5FD488-E20E-4622-8536-EACAF3B5D37E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}