CVE-2013-6686

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-18 · updated 2026-06-17
Weakness: CWE-20

Description

The SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users to cause a denial of service (interface queue wedge) via crafted DTLS packets in an SSL session, aka Bug IDs CSCuh97409 and CSCud90568.

Affected products

Cisco IOS: through 15.3; 15.0, 15.0(1)se, 15.1, 15.2

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6686
http://tools.cisco.com/security/center/viewAlert.x?alertId=31757
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6686
http://tools.cisco.com/security/center/viewAlert.x?alertId=31757

Get alerted when CVE-2013-6686 or the next vulnerability affects your stack