What’s Vulnerable › Vulnerabilities

CVE-2013-3182

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 94.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-08-14 · updated 2026-06-16
• Weakness: CWE-119

Description

The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processing of ICMP packets, which allows remote attackers to cause a denial of service (memory corruption and system hang) via crafted packets, aka "Windows NAT Denial of Service Vulnerability."

Affected products

• Microsoft Windows Server 2012: all versions

References

• http://www.us-cert.gov/ncas/alerts/TA13-225A
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-064
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18199
• http://www.us-cert.gov/ncas/alerts/TA13-225A
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-064
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18199

Get alerted when CVE-2013-3182 or the next vulnerability affects your stack