Lucene search
CiscoCVE-2013-5509HistoryOct 13, 2013 - 10:20 a.m.
CVE-2013-5509
2013-10-1310:20:04
CWE-264
cisco
web.nvd.nist.gov
28
ssl
cisco asa
authentication bypass
cve-2013-5509
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.004
Percentile
74.3%
The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) allows remote attackers to bypass authentication, and obtain VPN access or administrative access, via a crafted X.509 client certificate, aka Bug ID CSCuf52468.
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch9.0
ORciscoadaptive_security_appliance_softwareMatch9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | 9.0 | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 9.1 | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2013-10-13 10:20:00
nvd
nvd
CVE-2013-5509
2013-10-13 10:20:04
cvelist
cvelist
CVE-2013-5509
2013-10-13 10:00:00
nessus
nessus
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20131009-asa)
2013-10-17 00:00:00
securityvulns
securityvulns
Cisco ASA / FWSM multiple security vulnerabilities
2013-10-13 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco ASA Software
2013-10-09 16:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.004
Percentile
74.3%
Related for CVE-2013-5509