PT-2013-2957 · Cisco · Cisco Universal Broadband (Ubr) 10000 Series Routers+1

Publicado 2013-04-11 · Atualizado 2013-04-11 · CVE-2013-1189

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Média

Vetor base

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Universal Broadband (aka uBR) 10000 series routers (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a routing-engine reload, by making unspecified changes to IP address assignments when an IPv4/IPv6 dual-stack modem is used. An attacker could exploit this by manipulating IPv4 and IPv6 address assignments on a dual-stack modem connected to the affected device. The attacker must have access to a trusted, internal network to manipulate the modem and trigger the vulnerability.

Recommendations To resolve the issue, update the software to a version that includes the fix for the vulnerability. At the moment, there is no information about a specific version that contains a fix for this vulnerability, but software updates are available.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-1189

Produtos afetados

Cisco Ios

Cisco Universal Broadband (Ubr) 10000 Series Routers

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-1189 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130411-CVE-2013-1189 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1189 · Aviso do Fabricante