CVE-2013-3436

no score yetEPSS 1.4%

cisco ios: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2013-07-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:ios

References

http://osvdb.org/95460
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3436
http://tools.cisco.com/security/center/viewAlert.x?alertId=30140
http://www.securityfocus.com/bid/61362
http://www.securitytracker.com/id/1028810

Check your stack JSON