VULNERABILITY INTELLIGENCE
CVE-2013-1136
CVSS score4.6 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2013-05-13
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Description
The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service (route processor crash) by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193.
Primary references
- psirt@cisco.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory