CVE-2013-1149

CWE-119 — Buffer Overflow CWE-3995 documents4 sources

Severity

7.8HIGH

EPSS

0.4%

top 41.06%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Adaptive Security Appliance Software Cisco Firewall Services Module Software

Timeline

PublishedApr 11

Latest updateMay 17

Description

Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3), and Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(24.1) and 4.0 and 4.1 before 4.1(11.1), allow remote attackers to cause a denial of service (device reload) via a crafted IKEv1 message, aka Bug IDs CSCub85692 and CSCud20267.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/firewall_services_module_software34 versions+33

▶NVDcisco/adaptive_security_appliance_software88 versions+87

🔴Vulnerability Details

GHSA

GHSA-c6vm-979c-5chw: Cisco Adaptive Security Appliances (ASA) devices with software 7↗2022-05-17

▶

CVEList

CVE-2013-1149: Cisco Adaptive Security Appliances (ASA) devices with software 7↗2013-04-11

▶

📋Vendor Advisories

Cisco

Multiple Vulnerabilities in Cisco Firewall Services Module Software↗2013-04-10

▶

Cisco

Multiple Vulnerabilities in Cisco ASA Software↗2013-04-10

▶