CVE-2013-3436 in IOS
Сводка (Английский)
The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Резервировать
06.05.2013
Раскрытие
19.07.2013
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 9583 | Cisco IOS Group Encrypted Transport VPN Group Domain of Interpretation эскалация привилегий | 264 | Не определено | Не определено | CVE-2013-3436 |