CVE-2013-1151 — Improper Input Validation in Cisco Adaptive Security Appliance Software

CWE-20 — Improper Input ValidationCWE-3996 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.2%
top 55.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance Software
Timeline
PublishedApr 11
Latest updateMay 17

Description

Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5), 8.5 before 8.5(1.17), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3) allow remote attackers to cause a denial of service (device reload) via a crafted certificate, aka Bug ID CSCuc72408.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-q2gr-rg5x-jm99: Cisco Adaptive Security Appliances (ASA) devices with software 7↗2022-05-17
â–¶
CVEList
CVE-2013-1151: Cisco Adaptive Security Appliances (ASA) devices with software 7↗2013-04-11
â–¶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in Cisco ASA Software↗2013-04-10
â–¶

💬Community

2
Bugzilla
CVE-2013-4213 JBoss ejb-client: Session fixation due improper connection caching↗2013-07-17
â–¶
Bugzilla
CVE-2013-4128 JBoss remote-naming: Session fixation due improper connection caching↗2013-07-16
â–¶
CVE-2013-1151 — Improper Input Validation in Cisco | cvebase