CVE-2013-3436

The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3436	Vendor Advisory
http://osvdb.org/95460
http://tools.cisco.com/security/center/viewAlert.x?alertId=30140	Vendor Advisory
http://www.securitytracker.com/id/1028810
http://www.securityfocus.com/bid/61362
https://exchange.xforce.ibmcloud.com/vulnerabilities/85868

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*

Information

Published : 2013-07-19 07:36

Updated : 2017-11-28 18:29

NVD link : CVE-2013-3436

Mitre link : CVE-2013-3436

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Advertisement

Products Affected

cisco

ios

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3436", "name": "20130718 Cisco IOS GET VPN Encryption Policy Bypass Vulnerability", "tags": ["Vendor Advisory"], "refsource": "CISCO"}, {"url": "http://osvdb.org/95460", "name": "95460", "tags": [], "refsource": "OSVDB"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=30140", "name": "http://tools.cisco.com/security/center/viewAlert.x?alertId=30140", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securitytracker.com/id/1028810", "name": "1028810", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/61362", "name": "61362", "tags": [], "refsource": "BID"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85868", "name": "ciscoios-cve20133436-sec-bypass(85868)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-3436", "ASSIGNER": "psirt@cisco.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2013-07-19T14:36Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-11-29T02:29Z"}