Vulnerability Details : CVE-2006-4650
Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers to inject crafted packets into the routing queue, possibly bypassing intended router ACLs.
Vulnerability category: Overflow
Exploit prediction scoring system (EPSS) score for CVE-2006-4650
Probability of exploitation activity in the next 30 days: 8.80%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 94 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-4650
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
2.6
|
LOW | AV:N/AC:H/Au:N/C:P/I:N/A:N |
4.9
|
2.9
|
NIST |
References for CVE-2006-4650
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5713
-
http://securitytracker.com/id?1016799
-
http://www.vupen.com/english/advisories/2006/3502
-
http://www.securityfocus.com/bid/19878
-
http://www.cisco.com/en/US/tech/tk827/tk369/tsd_technology_security_response09186a008072cd7b.html
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/28786
-
http://www.securityfocus.com/archive/1/445322/100/0/threaded
-
http://securityreason.com/securityalert/1526
-
http://www.phenoelit.de/stuff/CiscoGRE.txt
Vendor Advisory
Products affected by CVE-2006-4650
- cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*