CVE-2013-3436 in IOS

Sumário (Inglês)

The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

06/05/2013

Divulgação

19/07/2013

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
9583	Cisco IOS Group Encrypted Transport VPN Group Domain of Interpretation Elevação de Privilégios	264	Não definido	Não definido	CVE-2013-3436

Fontes

• MITRE
• NVD
• CVE Details