CVE-2013-1241: Cisco 1921 Integrated Services Router

Medium severity, CVSS 6.3. EPSS: 1.5% chance of exploitation in the next 30 days.

The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025.

Affected products

• Cisco 1921 Integrated Services Router
• Cisco 1941 Integrated Services Router
• Cisco 1941w Integrated Services Router
• Cisco 2901 Integrated Services Router
• Cisco 2911 Integrated Services Router
• Cisco 2921 Integrated Services Router
• Cisco 2951 Integrated Services Router
• Cisco 3925 Integrated Services Router
• Cisco 3925e Integrated Services Router
• Cisco 3945 Integrated Services Router
• Cisco 3945e Integrated Services Router
• Cisco 861 Integrated Services Router
• Cisco 867 Integrated Services Router
• Cisco 880 3g Integrated Services Router
• Cisco 881 Integrated Services Router
• Cisco 886 Integrated Services Router
• Cisco 886va-W Integrated Services Router
• Cisco 886va Integrated Services Router
• Cisco 887 Integrated Services Router
• Cisco 887v Integrated Services Router
• Cisco 887va-W Integrated Services Router
• Cisco 887va Integrated Services Router
• Cisco 888 Integrated Services Router
• Cisco 891 Integrated Services Router
• Cisco 892 Integrated Services Router
• and 2 more

Published 2013-05-08. Last modified 2026-06-16.