CVE-2013-1147

Cisco IOS 12.3-12.4 and 15.0-15.3 - Denial of Service via Protocol Translation TCP Connection Handling

Title source: llm

Description

The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Telnet-to-PAD ruleset is configured, does not properly validate TCP connection information, which allows remote attackers to cause a denial of service (device reload) via an attempted connection to a PT resource, aka Bug ID CSCtz35999.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-pt

Scores

EPSS 0.0133

EPSS Percentile 67.7%

Details

CWE

CWE-119

Status published

Products (6)

cisco/ios 12.3

cisco/ios 12.4

cisco/ios 15.0

cisco/ios 15.1

cisco/ios 15.2

cisco/ios 15.3

Published Mar 28, 2013

Tracked Since Feb 18, 2026