Lucene search

K
cveCiscoCVE-2012-4659
HistoryOct 29, 2012 - 8:55 p.m.

CVE-2012-4659

2012-10-2920:55:01
CWE-287
cisco
web.nvd.nist.gov
28
2
cve-2012-4659
cisco
asa
ssl vpn
denial of service
aaa
nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.006

Percentile

77.8%

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566.

Affected configurations

Nvd
Node
ciscoadaptive_security_appliance_softwareMatch8.2
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(3\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(3.9\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(4\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(4.1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(4.4\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch8.3\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.3\(2\)
AND
cisco5500_series_adaptive_security_appliance
OR
ciscocatalyst_6500
OR
ciscocatalyst_6503-eMatch-
OR
ciscocatalyst_6504-eMatch-
OR
ciscocatalyst_6506-eMatch-
OR
ciscocatalyst_6509-eMatch-
OR
ciscocatalyst_6509-neb-aMatch-
OR
ciscocatalyst_6509-v-eMatch-
OR
ciscocatalyst_6513Match-
OR
ciscocatalyst_6513-eMatch-
VendorProductVersionCPE
ciscoadaptive_security_appliance_software8.2cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(1)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(2)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(3)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(3.9)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(4)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(4.1)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(4.4)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2(5)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.3(1)cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):*:*:*:*:*:*:*
Rows per page:
1-10 of 211

Social References

More

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.006

Percentile

77.8%

Related for CVE-2012-4659