CVE-2013-5498

Name of the Vulnerable Software and Affected Versions Cisco CRS Carrier Grade Services Engine (CGSE) and Cisco ASR 9000 Series Integrated Service Module (ISM) (affected versions not specified)

Description A vulnerability in the Point-to-Point Tunneling Protocol-Application Level Gateway (PPTP-ALG) component allows remote attackers to cause a denial of service (module reset) via crafted packet streams. The issue is due to the processing of packet sequences in the PPTP-ALG. An attacker could exploit this by sending specific streams of traffic through the device, potentially allowing them to cause the service module to reset. The attacker must send a crafted stream of traffic through the targeted system, which may require access to trusted, internal network resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.