Unscored CVE-2013-3436 EUVD-2013-3371GHSA-6c9w-3vp8-m2hh

The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group…

Published Jul 18, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.

References

20130718 Cisco IOS GET VPN Encryption Policy Bypass Vulnerability vendor-advisory
95460 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=30140
ciscoios-cve20133436-sec-bypass(85868) vdb-entry
61362 vdb-entry
1028810 vdb-entry