CVE-2013-5552

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-13 · updated 2026-06-16
Weakness: CWE-264

Description

Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.

Affected products

Cisco Content Services Gateway: all versions
Cisco IOS: through 12.4\(24\)mdb14; 12.4(24)md, 12.4(24)md1, 12.4(24)md2, 12.4(24)md3, 12.4(24)md4, 12.4(24)md5 (+18)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552
http://tools.cisco.com/security/center/viewAlert.x?alertId=31715
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552
http://tools.cisco.com/security/center/viewAlert.x?alertId=31715

Get alerted when CVE-2013-5552 or the next vulnerability affects your stack