Unscored severity · published Aug 30, 2013
CVE-2013-5469
The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
Ios · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5469
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5469
osvdb.org
http://osvdb.org/96764
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5469
www.securityfocus.com
http://www.securityfocus.com/bid/62083
www.securitytracker.com
http://www.securitytracker.com/id/1028969
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/86794
More from Ios
9.8
CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
9.8
CVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
9.8
CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
8.8
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
8.8
CVE-2017-6736
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability