{"api_version":"1","generated_at":"2026-07-23T22:22:00+00:00","cve":"CVE-2013-5552","urls":{"html":"https://cve.report/CVE-2013-5552","api":"https://cve.report/api/cve/CVE-2013-5552.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-5552","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-5552"},"summary":{"title":"CVE-2013-5552","description":"Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the \"parse error drop\" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.","state":"PUBLISHED","assigner":"cisco","published_at":"2013-11-13 15:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=31715","name":"http://tools.cisco.com/security/center/viewAlert.x?alertId=31715","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Alert Details - Security Center - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552","name":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Security Notice: Cisco Content Services Gateway Traffic Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5552","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5552","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"content_services_gateway","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4mda12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md5a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)md9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mda9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mdb10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mdb11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mdb12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"12.4\\(24\\)mdb13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5552","vulnerable":"1","versionEndIncluding":"12.4\\(24\\)mdb14","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"ios","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T17:15:21.405Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=31715"},{"name":"20131111 Cisco Content Services Gateway Traffic Bypass Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the \"parse error drop\" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-11-13T15:00:00.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=31715"},{"name":"20131111 Cisco Content Services Gateway Traffic Bypass Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2013-5552","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the \"parse error drop\" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://tools.cisco.com/security/center/viewAlert.x?alertId=31715","refsource":"CONFIRM","url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=31715"},{"name":"20131111 Cisco Content Services Gateway Traffic Bypass Vulnerability","refsource":"CISCO","url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2013-5552","datePublished":"2013-11-13T15:00:00.000Z","dateReserved":"2013-08-22T00:00:00.000Z","dateUpdated":"2024-09-17T03:13:24.773Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-11-13 15:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4\\(24\\)mdb14","matchCriteriaId":"820D1B94-7EF3-4032-BF99-28BE17326A1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md:*:*:*:*:*:*:*","matchCriteriaId":"539454C8-EA90-4146-9429-72465CF555FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md1:*:*:*:*:*:*:*","matchCriteriaId":"4E44F5F4-D7FE-4B9C-BA65-2365EF7A8092"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md2:*:*:*:*:*:*:*","matchCriteriaId":"9548BCBF-0E01-41F8-A6BA-D70032340C73"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md3:*:*:*:*:*:*:*","matchCriteriaId":"B9BF1BB8-EAB1-46C9-BD36-73E502619C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md4:*:*:*:*:*:*:*","matchCriteriaId":"34F23388-1B0B-4708-85F4-5A8B7359C1B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md5:*:*:*:*:*:*:*","matchCriteriaId":"F6728EA8-00AC-4BE1-AA48-22D8AA861532"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md5a:*:*:*:*:*:*:*","matchCriteriaId":"4C647005-D8AF-4344-8493-4440FDF9E5D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md6:*:*:*:*:*:*:*","matchCriteriaId":"10090F0A-645B-451E-ABAA-57DCA9C081E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md7:*:*:*:*:*:*:*","matchCriteriaId":"B87BBFE8-2D55-4CDF-B624-6B509411945B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md8:*:*:*:*:*:*:*","matchCriteriaId":"81D33091-2FD1-41BB-98F7-600AB58090AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)md9:*:*:*:*:*:*:*","matchCriteriaId":"41D3C059-9E65-40B4-9353-F0A089AEDB03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda6:*:*:*:*:*:*:*","matchCriteriaId":"EF65A6E8-8D58-4537-8AE6-DE4A72FF3A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda7:*:*:*:*:*:*:*","matchCriteriaId":"9622A8CF-0C0A-4CED-B469-CAA868970323"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda8:*:*:*:*:*:*:*","matchCriteriaId":"A9746F30-F1AD-4643-8BAD-6FD049B7536F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda9:*:*:*:*:*:*:*","matchCriteriaId":"C533F5D8-9C23-4D7E-8C58-56B65AD76AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda10:*:*:*:*:*:*:*","matchCriteriaId":"CB531CBC-8EE0-46B0-88C5-2362837729E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda11:*:*:*:*:*:*:*","matchCriteriaId":"3E4485F3-AF11-4E2D-AF01-8243D9C8A851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda12:*:*:*:*:*:*:*","matchCriteriaId":"F4433412-E849-4040-BAA5-1CE9CE17B924"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mda13:*:*:*:*:*:*:*","matchCriteriaId":"4E9B1DF0-A3D9-4AFD-9305-C156A8CB101C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb10:*:*:*:*:*:*:*","matchCriteriaId":"A9C02086-1473-403B-97AF-8500104E6C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb11:*:*:*:*:*:*:*","matchCriteriaId":"ED2ED2BA-9D3E-412B-86C2-2A0E9588E84D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb12:*:*:*:*:*:*:*","matchCriteriaId":"9AC9CBDA-AFED-45E7-91CC-8AFD887122D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb13:*:*:*:*:*:*:*","matchCriteriaId":"FCA93FA2-0C10-4809-8EE3-3445DC5B1E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mda12:*:*:*:*:*:*:*","matchCriteriaId":"20C7EDD2-EA4E-411A-BABD-E466BF997E3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"B6B8568B-1AC1-4106-8EBC-473B2E9E91D0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"5552","Ordinal":"1","Title":"CVE-2013-5552","CVE":"CVE-2013-5552","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"5552","Ordinal":"1","NoteData":"Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the \"parse error drop\" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.","Type":"Description","Title":"CVE-2013-5552"},{"CveYear":"2013","CveId":"5552","Ordinal":"2","NoteData":"2013-11-13","Type":"Other","Title":"Published"}]}}}