Lucene search

K
cveCiscoCVE-2012-5415
HistoryApr 16, 2013 - 2:04 p.m.

CVE-2012-5415

2013-04-1614:04:30
CWE-362
cisco
web.nvd.nist.gov
23
cisco
adaptive security appliances
asa
remote attackers
denial of service
cpu consumption
device reload
race condition
hash lookups
bug ids
cscue31622
cscuc71272
nvd

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

53.2%

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.

Affected configurations

Nvd
Node
cisco5500_adaptive_security_applianceMatch7.22
OR
cisco5500_series_adaptive_security_appliance
OR
cisco5500_series_adaptive_security_applianceMatch7.2
OR
ciscoadaptive_security_appliance
VendorProductVersionCPE
cisco5500_adaptive_security_appliance7.2cpe:2.3:h:cisco:5500_adaptive_security_appliance:7.2:2:*:*:*:*:*:*
cisco5500_series_adaptive_security_appliance*cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*
cisco5500_series_adaptive_security_appliance7.2cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:7.2:*:*:*:*:*:*:*
ciscoadaptive_security_appliance*cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

53.2%

Related for CVE-2012-5415