CVE-2013-1241

Severity: medium (CVSS 6.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-08 · updated 2026-06-16
Weakness: CWE-287

Description

The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025.

Affected products

Cisco 1921 Integrated Services Router: all versions
Cisco 1941 Integrated Services Router: all versions
Cisco 1941W Integrated Services Router: all versions
Cisco 2901 Integrated Services Router: all versions
Cisco 2911 Integrated Services Router: all versions
Cisco 2921 Integrated Services Router: all versions
Cisco 2951 Integrated Services Router: all versions
Cisco 3925 Integrated Services Router: all versions
Cisco 3925E Integrated Services Router: all versions
Cisco 3945 Integrated Services Router: all versions
Cisco 3945E Integrated Services Router: all versions
Cisco 861 Integrated Services Router: all versions
Cisco 867 Integrated Services Router: all versions
Cisco 880 3G Integrated Services Router: all versions
Cisco 881 Integrated Services Router: all versions
Cisco 886 Integrated Services Router: all versions
Cisco 886Va-W Integrated Services Router: all versions
Cisco 886Va Integrated Services Router: all versions
Cisco 887 Integrated Services Router: all versions
Cisco 887V Integrated Services Router: all versions
Cisco 887Va-W Integrated Services Router: all versions
Cisco 887Va Integrated Services Router: all versions
Cisco 888 Integrated Services Router: all versions
Cisco 891 Integrated Services Router: all versions
Cisco 892 Integrated Services Router: all versions
Cisco C881W Integrated Services Router: all versions
Cisco IOS: all versions

References

Get alerted when CVE-2013-1241 or the next vulnerability affects your stack