CVE-2013-1143: The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS b...

Security readout for executives and security teams

This vulnerability can let a remote attacker crash and reload certain Cisco routers when MPLS Traffic Engineering is enabled. The business impact is availability loss on routing infrastructure, not data theft. Exposure depends on vulnerable Cisco IOS or IOS XE versions and whether RSVP/MPLS-TE is in use. Most likely exposed systems are Cisco routers running affected IOS or IOS XE trains with MPLS-TE enabled. Organizations without RSVP/MPLS-TE enabled are less likely to be exposed based on the CVE description. Prioritize for networks where affected Cisco routers carry critical MPLS traffic. The issue can interrupt connectivity by reloading infrastructure devices, but urgency is lower where MPLS-TE is absent or devices are already beyond the named fixed releases. Mitigation focus: Inventory Cisco IOS and IOS XE routers using MPLS-TE or RSVP.; Upgrade IOS XE 3.4.xS to 3.4.5S or later where applicable.; Upgrade IOS XE 3.5.xS through 3.7.xS to 3.7.2S or later where applicable..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.