Lucene search

K
cveCiscoCVE-2013-6682
HistoryNov 13, 2013 - 3:55 p.m.

CVE-2013-6682

2013-11-1315:55:04
CWE-20
cisco
web.nvd.nist.gov
19
cve-2013-6682
cisco
adaptive security appliance
asa software
x.509 certificates
denial of service
nvd
bug id cscui33299.

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

52.0%

The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.

Affected configurations

Nvd
Node
ciscoadaptive_security_appliance_softwareRange9.0.3\(6\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(0\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(4\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(5.2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(6\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(6.7\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(7\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(8\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0.1
OR
ciscoadaptive_security_appliance_softwareMatch7.0.1.4
OR
ciscoadaptive_security_appliance_softwareMatch7.0.2
OR
ciscoadaptive_security_appliance_softwareMatch7.0.4
OR
ciscoadaptive_security_appliance_softwareMatch7.0.4.3
OR
ciscoadaptive_security_appliance_softwareMatch7.0.5
OR
ciscoadaptive_security_appliance_softwareMatch7.0.6
OR
ciscoadaptive_security_appliance_softwareMatch7.0.7
OR
ciscoadaptive_security_appliance_softwareMatch7.0.8
OR
ciscoadaptive_security_appliance_softwareMatch7.0.8interim
OR
ciscoadaptive_security_appliance_softwareMatch7.1
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.27\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.48\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.49\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1.1
OR
ciscoadaptive_security_appliance_softwareMatch7.1.2
OR
ciscoadaptive_security_appliance_softwareMatch7.2
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(1.22\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.7\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.8\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.10\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.14\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.15\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.16\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.17\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.18\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.19\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.48\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(3\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(4\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2.1
OR
ciscoadaptive_security_appliance_softwareMatch7.2.2
OR
ciscoadaptive_security_appliance_softwareMatch7.2.3
OR
ciscoadaptive_security_appliance_softwareMatch7.2.4
OR
ciscoadaptive_security_appliance_softwareMatch7.2.5
OR
ciscoadaptive_security_appliance_softwareMatch8.0
OR
ciscoadaptive_security_appliance_softwareMatch8.0\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch8.0\(3\)
OR
ciscoadaptive_security_appliance_softwareMatch8.0\(4\)
OR
ciscoadaptive_security_appliance_softwareMatch8.0\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch8.0\(5.28\)
OR
ciscoadaptive_security_appliance_softwareMatch8.0\(5.31\)
OR
ciscoadaptive_security_appliance_softwareMatch8.0.2
OR
ciscoadaptive_security_appliance_softwareMatch8.0.3
OR
ciscoadaptive_security_appliance_softwareMatch8.0.4
OR
ciscoadaptive_security_appliance_softwareMatch8.0.5
OR
ciscoadaptive_security_appliance_softwareMatch8.1
OR
ciscoadaptive_security_appliance_softwareMatch8.2
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(3\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(3.9\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(4\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(4.1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(4.4\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(5.35\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(5.38\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2.1
OR
ciscoadaptive_security_appliance_softwareMatch8.2.2
OR
ciscoadaptive_security_appliance_softwareMatch8.2.2interim
OR
ciscoadaptive_security_appliance_softwareMatch8.2.3
OR
ciscoadaptive_security_appliance_softwareMatch8.3\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.3\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch8.3\(2.34\)
OR
ciscoadaptive_security_appliance_softwareMatch8.3\(2.37\)
OR
ciscoadaptive_security_appliance_softwareMatch8.3.1
OR
ciscoadaptive_security_appliance_softwareMatch8.3.1interim
OR
ciscoadaptive_security_appliance_softwareMatch8.3.2
OR
ciscoadaptive_security_appliance_softwareMatch8.4
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(1.11\)
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(2.11\)
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(3\)
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(4.11\)
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch8.4\(6\)
OR
ciscoadaptive_security_appliance_softwareMatch8.5
OR
ciscoadaptive_security_appliance_softwareMatch8.5\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.5\(1.4\)
OR
ciscoadaptive_security_appliance_softwareMatch8.5\(1.17\)
OR
ciscoadaptive_security_appliance_softwareMatch8.6
OR
ciscoadaptive_security_appliance_softwareMatch8.6\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.6\(1.3\)
OR
ciscoadaptive_security_appliance_softwareMatch8.6\(1.10\)
OR
ciscoadaptive_security_appliance_softwareMatch8.7
OR
ciscoadaptive_security_appliance_softwareMatch8.7\(1.1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.7\(1.3\)
OR
ciscoadaptive_security_appliance_softwareMatch8.7.1
OR
ciscoadaptive_security_appliance_softwareMatch8.7.1.1
OR
ciscoadaptive_security_appliance_softwareMatch9.0
OR
ciscoadaptive_security_appliance_softwareMatch9.0\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch9.0\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch9.0\(3\)
VendorProductVersionCPE
ciscoadaptive_security_appliance_software*cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(0)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(0\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(1)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(1\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(2)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(2\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(4)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(4\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(5)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(5\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(5.2)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(5.2\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(6)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(6\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(6.7)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(6.7\):*:*:*:*:*:*:*
Rows per page:
1-10 of 1141

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

52.0%

Related for CVE-2013-6682