CVE-2013-6704 in IOS XE

الملخص

بحسب MITRE

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty42686.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 07/11/2013
• إفشاء: 03/12/2013
• الاعتدال: تمت الموافقة
• إدخال: VDB-11369
• CPE: جاهز
• CWE: CWE-399 (مؤكد)
• CVSS: 7.1 (NVD)
• EPSS: 0.01346
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Insurance, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-6704
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-6704
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-6704/