CVE-2013-5552: Cisco Content Services Gateway

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143.

Affected products

• Cisco Content Services Gateway
• Cisco IOS: up to and including 12.4\(24\)mdb14; version 12.4(24)md only; version 12.4(24)md1 only; version 12.4(24)md2 only; version 12.4(24)md3 only; version 12.4(24)md4 only; …

Published 2013-11-13. Last modified 2026-06-16.