Unscored CVE-2013-5552 EUVD-2013-5392GHSA-x583-rp6c-xwgv

Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, wh…

Published Nov 13, 2013 · Updated Sep 17, 2024 · Assigned by cisco

Description

Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=31715
20131111 Cisco Content Services Gateway Traffic Bypass Vulnerability vendor-advisory