Unrated severityNVD Advisory· Published Jul 19, 2013· Updated Jun 16, 2026

CVE-2013-3436

Description

The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Cisco iOS2 versions
cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3436nvdVendor Advisory
tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
osvdb.org/95460nvd
www.securityfocus.com/bid/61362nvd
www.securitytracker.com/id/1028810nvd
exchange.xforce.ibmcloud.com/vulnerabilities/85868nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000