CVE-2013-5548 : The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows

The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795.

Published 2013-11-01 02:55:05

Updated 2013-11-21 19:29:10

Source Cisco Systems, Inc.

View at NVD, CVE.org

Products affected by CVE-2013-5548

Cisco » IOS » Version: N/A
cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2013-5548

EPSS FAQ

0.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-5548

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

CWE ids for CVE-2013-5548

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-5548

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5548

Cisco IOS Software Internet Key Exchange Version 2 Anti-replay Protection Disabled Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2013-5548

Products affected by CVE-2013-5548

Exploit prediction scoring system (EPSS) score for CVE-2013-5548

CVSS scores for CVE-2013-5548

CWE ids for CVE-2013-5548

References for CVE-2013-5548