CVE Feed

    Dashboard / CVE / CVE-2013-1241

    CVE-2013-1241

    The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025.

    Published:May 8, 2013
    Last Modified:Apr 11, 2025
    EPS:May 8, 2013
    EPSS Score:0.00366
    CVSS Score:6.3

    Affected Products

    Vendor
    Cisco
    Product
    1921 Integrated Services Router
    Vendor
    Cisco
    Product
    1941 Integrated Services Router
    Vendor
    Cisco
    Product
    1941w Integrated Services Router
    Vendor
    Cisco
    Product
    2901 Integrated Services Router
    Vendor
    Cisco
    Product
    2911 Integrated Services Router
    Vendor
    Cisco
    Product
    2921 Integrated Services Router
    Vendor
    Cisco
    Product
    2951 Integrated Services Router
    Vendor
    Cisco
    Product
    3925 Integrated Services Router
    Vendor
    Cisco
    Product
    3925e Integrated Services Router
    Vendor
    Cisco
    Product
    3945 Integrated Services Router
    Vendor
    Cisco
    Product
    3945e Integrated Services Router
    Vendor
    Cisco
    Product
    861 Integrated Services Router
    Vendor
    Cisco
    Product
    867 Integrated Services Router
    Vendor
    Cisco
    Product
    880 3g Integrated Services Router
    Vendor
    Cisco
    Product
    881 Integrated Services Router
    Vendor
    Cisco
    Product
    886 Integrated Services Router
    Vendor
    Cisco
    Product
    886va-w Integrated Services Router
    Vendor
    Cisco
    Product
    886va Integrated Services Router
    Vendor
    Cisco
    Product
    887 Integrated Services Router
    Vendor
    Cisco
    Product
    887v Integrated Services Router
    Vendor
    Cisco
    Product
    887va-w Integrated Services Router
    Vendor
    Cisco
    Product
    887va Integrated Services Router
    Vendor
    Cisco
    Product
    888 Integrated Services Router
    Vendor
    Cisco
    Product
    891 Integrated Services Router
    Vendor
    Cisco
    Product
    892 Integrated Services Router
    Vendor
    Cisco
    Product
    C881w Integrated Services Router
    Vendor
    Cisco
    Product
    Ios

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2018-0154 (CVSS 7.5) — A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco I…
    CVE-2018-0163 (CVSS 6.5) — A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow a…
    CVE-2018-0179 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2018-0180 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2017-12319 (CVSS 5.9) — A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco…
    CVE-2017-12240 (CVSS 9.8) — The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability tha…
    CVE-2017-12233 (CVSS 7.5) — Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12…
    CVE-2017-12237 (CVSS 7.5) — A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco…
    CVE-2017-12232 (CVSS 6.5) — A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2)…
    CVE-2017-12234 (CVSS 7.5) — Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High