CVE-2013-3436

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-19 · updated 2026-06-16
Weakness: CWE-264

Description

The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.

Affected products

Cisco IOS: all versions

References

http://osvdb.org/95460
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3436
http://tools.cisco.com/security/center/viewAlert.x?alertId=30140
http://www.securityfocus.com/bid/61362
http://www.securitytracker.com/id/1028810
https://exchange.xforce.ibmcloud.com/vulnerabilities/85868
http://osvdb.org/95460
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3436
http://tools.cisco.com/security/center/viewAlert.x?alertId=30140
http://www.securityfocus.com/bid/61362
http://www.securitytracker.com/id/1028810
https://exchange.xforce.ibmcloud.com/vulnerabilities/85868

Get alerted when CVE-2013-3436 or the next vulnerability affects your stack