CVE-2013-5473: Cisco IOS

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011.

Affected products

• Cisco IOS: version 12.2 only; version 15.1 only; version 15.2 only
• Cisco IOS XE: version 3.4.2s only; version 3.4.3s only; version 3.4.4s only; version 3.4.5s only; version 3.6.0s only

Published 2013-09-27. Last modified 2026-06-16.