CVE-2013-1241: The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which...

Security readout for executives and security teams

This CVE describes a Cisco IOS issue on ISR G2 routers where the ISM module can reload after malformed authentication-header packets are processed. In business terms, the main risk is service disruption on affected router modules, not data theft. The source bundle does not provide CVSS, affected versions, or a named fix. Exposure appears limited to environments running Cisco IOS on ISR G2 routers with the ISM module. The bundle lists no precise versions, CPEs, or deployment conditions, so asset validation against Cisco guidance is required before scoping impact. Treat as a targeted availability risk. Prioritize internet-exposed or shared-network routers where authenticated users are less tightly controlled. Escalate remediation once Cisco guidance confirms affected software or modules. Mitigation focus: Identify Cisco ISR G2 routers with ISM modules in the environment.; Check Cisco’s advisory or TAC for applicable remediation guidance.; Restrict access to trusted authenticated users and necessary network paths..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.