PT-2013-2957 · Cisco · Cisco Universal Broadband (Ubr) 10000 Series Routers+1

Published 2013-04-11 · Updated 2013-04-11 · CVE-2013-1189

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Universal Broadband (aka uBR) 10000 series routers (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a routing-engine reload, by making unspecified changes to IP address assignments when an IPv4/IPv6 dual-stack modem is used. An attacker could exploit this by manipulating IPv4 and IPv6 address assignments on a dual-stack modem connected to the affected device. The attacker must have access to a trusted, internal network to manipulate the modem and trigger the vulnerability.

Recommendations To resolve the issue, update the software to a version that includes the fix for the vulnerability. At the moment, there is no information about a specific version that contains a fix for this vulnerability, but software updates are available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-1189

Affected Products

Cisco Ios

Cisco Universal Broadband (Ubr) 10000 Series Routers

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-1189 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1189 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130411-CVE-2013-1189 · Note