{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:12:45Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20130722-CVE-2013-3441","slug":"cisco-sa-20130722-cve-2013-3441","vendor":"Cisco","title":"Cisco Aironet 3600 Series Access Point Denial of Service Vulnerability ","summary":"A vulnerability in the Cisco Aironet 3600 Series Access Point could allow an unauthenticated, remote attacker to trigger a denial of service condition. The vulnerability is due to a memory corruption condition that could occur when the device switches between FlexConnect and Standalone mode. An attacker could exploit this vulnerability by disrupting the communications path between a configured and provisioned FlexConnect access point and the Cisco Wireless LAN Controller. An exploit could allow the attacker to cause the access point to crash, resulting in a denial of service condition forcing the device to restart.  This issue has been observed to occur when a switch between FlexConnect and Standalone mode transpires frequently during a 24 to 48 hour period. Cisco has confirmed this vulnerability in a security notice; however, software updates are not available. To exploit this vulnerability, an attacker may require access to trusted, internal networks in which the targeted device may reside. This access requirement could limit the likelihood of a successful exploit. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2013-07-22T19:25:37Z","updated_at":"2013-07-22T19:25:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130722-CVE-2013-3441","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20130722-CVE-2013-3441/csaf/Cisco-SA-20130722-CVE-2013-3441.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.0154},"cves":[{"id":"CVE-2013-3441","kev":false,"epss":{"score":0.0154,"percentile":0.72165,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Aironet Access Point Software","slug":"cisco-aironet-access-point-software","vendor":"Cisco"},"cve":{"id":"CVE-2013-3441"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Aironet Access Point Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0154,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2013-07-22T19:25:37Z","updated_at":"2013-07-22T19:25:37Z","advisory_updated_at":"2013-07-22T19:25:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130722-CVE-2013-3441","row_display_order":1}]}