Home

CVE-2013-1146

Description

The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in Smart Install packets, aka Bug ID CSCub55790.

Risk Information

Base Score
6.2
MODERATE
Vector
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.427

Associated Vulnerability

VulnerabilityOS Platform
Cisco IOS Software Smart Install Denial of Service Vulnerability For Cisco IOSNCM
Cisco IOS Software Smart Install Denial of Service Vulnerability For Cisco IOSNCM
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-1146)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1706090Security Update for Cisco IOS Amsterdam-17.2.1r
PATCH-1706090Security Update for Cisco IOS Amsterdam-17.2.1r

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234