CVE-2013-1218

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-18 · updated 2026-06-16
Weakness: CWE-119

Description

Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.

Affected products

Cisco Asa 5500-X Series Ips Ssp Software: 7.1
Cisco Asa 5585-X: all versions
Cisco Idsm-2: all versions
Cisco Intrusion Prevention System: through 7.1
Cisco Ips 4345 Sensor: all versions
Cisco Ips 4360 Sensor: all versions
Cisco Ips 4510 Sensor: all versions
Cisco Ips 4520 Sensor: all versions
Cisco Ips Nme: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips

Get alerted when CVE-2013-1218 or the next vulnerability affects your stack