The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00633.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

AND
cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:catalyst_2820:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2820:9.0_0.07:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2900:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2900:lre_xl:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2900:xl:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2900_vlan:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2900xl:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2901:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2902:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2920:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2926:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2926f:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2926gl:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2926gs:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2926t:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2940:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2948:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2948-ge-tx:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2948g:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2948g-l3:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2950:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2950_lre:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2955:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2970:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2980g:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2980g-a:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3000:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3200:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3500:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3500_xl:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3500xl:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3550:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560-e:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560-x:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750-e:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750-x:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750_metro:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750g:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3900:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4000:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4200:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4224:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4232:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4232-13:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4500:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4503:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4506:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4507r:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4510r:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4840g:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4908g-l3:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4912g:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4948:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_5000:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_5500:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_5505:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_5509:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6000:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:2.2\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:2.2\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:2.1\(2\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:2.2\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:2.2\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:2.1\(2\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6509-neb-a:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6513:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6608:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_6624:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:2.2\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:2.2\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:2.1\(2\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:3.1\(1a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_8500:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_8510csr:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_8510msr:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_8540csr:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_8540msr:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_ws-c2924-xl:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Cisco Subscribe
Catalyst 2820 Subscribe
Catalyst 2900 Subscribe
Catalyst 2900 Vlan Subscribe
Catalyst 2900xl Subscribe
Catalyst 2901 Subscribe
Catalyst 2902 Subscribe
Catalyst 2920 Subscribe
Catalyst 2926 Subscribe
Catalyst 2926f Subscribe
Catalyst 2926gl Subscribe
Catalyst 2926gs Subscribe
Catalyst 2926t Subscribe
Catalyst 2940 Subscribe
Catalyst 2948 Subscribe
Catalyst 2948-ge-tx Subscribe
Catalyst 2948g Subscribe
Catalyst 2948g-l3 Subscribe
Catalyst 2950 Subscribe
Catalyst 2950 Lre Subscribe
Catalyst 2955 Subscribe
Catalyst 2970 Subscribe
Catalyst 2980g Subscribe
Catalyst 2980g-a Subscribe
Catalyst 3000 Subscribe
Catalyst 3200 Subscribe
Catalyst 3500 Subscribe
Catalyst 3500 Xl Subscribe
Catalyst 3500xl Subscribe
Catalyst 3550 Subscribe
Catalyst 3560 Subscribe
Catalyst 3560-e Subscribe
Catalyst 3560-x Subscribe
Catalyst 3750 Subscribe
Catalyst 3750-e Subscribe
Catalyst 3750-x Subscribe
Catalyst 3750 Metro Subscribe
Catalyst 3750g Subscribe
Catalyst 3900 Subscribe
Catalyst 4000 Subscribe
Catalyst 4200 Subscribe
Catalyst 4224 Subscribe
Catalyst 4232 Subscribe
Catalyst 4232-13 Subscribe
Catalyst 4500 Subscribe
Catalyst 4503 Subscribe
Catalyst 4506 Subscribe
Catalyst 4507r Subscribe
Catalyst 4510r Subscribe
Catalyst 4840g Subscribe
Catalyst 4908g-l3 Subscribe
Catalyst 4912g Subscribe
Catalyst 4948 Subscribe
Catalyst 5000 Subscribe
Catalyst 5500 Subscribe
Catalyst 5505 Subscribe
Catalyst 5509 Subscribe
Catalyst 6000 Subscribe
Catalyst 6000 Ws-svc-nam-1 Subscribe
Catalyst 6000 Ws-svc-nam-2 Subscribe
Catalyst 6000 Ws-x6380-nam Subscribe
Catalyst 6500 Subscribe
Catalyst 6500 Ws-svc-nam-1 Subscribe
Catalyst 6500 Ws-svc-nam-2 Subscribe
Catalyst 6500 Ws-x6380-nam Subscribe
Catalyst 6503-e Subscribe
Catalyst 6504-e Subscribe
Catalyst 6506-e Subscribe
Catalyst 6509-e Subscribe
Catalyst 6509-neb-a Subscribe
Catalyst 6509-v-e Subscribe
Catalyst 6513 Subscribe
Catalyst 6513-e Subscribe
Catalyst 6608 Subscribe
Catalyst 6624 Subscribe
Catalyst 7600 Subscribe
Catalyst 7600 Ws-svc-nam-1 Subscribe
Catalyst 7600 Ws-svc-nam-2 Subscribe
Catalyst 7600 Ws-x6380-nam Subscribe
Catalyst 8500 Subscribe
Catalyst 8510csr Subscribe
Catalyst 8510msr Subscribe
Catalyst 8540csr Subscribe
Catalyst 8540msr Subscribe
Catalyst Ws-c2924-xl Subscribe
Ios Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2013-1140 The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1100 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-09-16T18:14:13.971Z

Reserved: 2013-01-11T00:00:00.000Z

Link: CVE-2013-1100

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-02-13T23:55:01.117

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-1100

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses