CVE-2013-5568 — Improper Input Validation in Cisco Adaptive Security Appliance Software

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.1HIGHNVD
EPSS
0.3%
top 42.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance Software
Timeline
PublishedNov 13
Latest updateMay 17

Description

The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service (device reload) via crafted update data, aka Bug ID CSCui33308.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-5rr6-459r-623v: The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9↗2022-05-17
â–¶
CVEList
CVE-2013-5568: The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9↗2013-11-13
â–¶

📋Vendor Advisories

1
Cisco
Cisco Adaptive Security Appliance Auto-Update Denial of Service Vulnerability↗2013-11-11
â–¶
CVE-2013-5568 — Improper Input Validation in Cisco | cvebase