Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
This product includes Third-party Software that is affected by the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs: CVE-2013-4242 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4242 CVE-2014-3591 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3591 CVE-2014-5270 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5270 CVE-2015-0837 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0837 CVE-2015-7511 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7511 CVE-2016-6313 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6313 CVE-2017-0379 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0379 CVE-2017-7526 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7526 CVE-2017-9526 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9526 CVE-2018-0495 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0495 CVE-2019-13627 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13627 CVE-2021-33560 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33560 CVE-2021-40528 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40528 After analysis, Cisco has decided against performing additional actions on this product due to one of the following reasons: - The product is no longer maintained, having reached End of Software Maintenance. - The product is still being maintained, but a business decision was made not to upgrade the vulnerable product. - The product uses the affected third-party component in such a way as to not be affected by these vulnerabilities.
Device with default configuration.
Not available or not applicable.
Additional details about the vulnerabilities listed above can be found at https://www.cve.org/. PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 3.0 score. The Base CVSS score as of the time of evaluation is: 7.5 https://tools.cisco.com/security/center/cvssCalculator.x?version=3.0&vector=CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE ID CVE-2013-4242, CVE-2014-3591, CVE-2014-5270, CVE-2015-0837, CVE-2015-7511, CVE-2016-6313, CVE-2017-0379, CVE-2017-7526, CVE-2017-9526, CVE-2018-0495, CVE-2019-13627, CVE-2021-33560, CVE-2021-40528 have been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html