PT-2013-5565

CVE-2013-5477

·

Published

2013-09-25

·

Updated

2013-10-07

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3
Description A vulnerability in the T1/E1 driver queue implementation could allow an unauthenticated, remote attacker to cause an interface wedge condition, leading to loss of connectivity and routing protocol adjacency, resulting in a denial of service scenario. This issue is due to the incorrect implementation of the T1/E1 driver queue. An attacker could exploit this by sending bursty traffic through the affected interface driver, potentially causing repeated exploitation to result in a denial of service condition.
Recommendations For Cisco IOS versions 12.2, 15.0 through 15.3, update to a fixed software version to address this vulnerability. As a temporary workaround, consider implementing workarounds to mitigate this vulnerability, such as restricting bursty network traffic to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾