CVE-2019-12693Incorrect Type Conversion or Cast in Cisco Adaptive Security Appliance Software

Severity
4.9MEDIUMNVD
EPSS
0.4%
top 41.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 2
Latest updateMay 24

Description

A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to the use of an incorrect data type for a length variable. An attacker could exploit this vulnerability by initiating the transfer of a large file to an affected device via SCP. To exploit this vulnerability, the attacker would need to have valid privilege level 15 credentials on

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-rc7c-qrr9-4694: A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to2022-05-24
CVEList
Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability2019-10-02

📋Vendor Advisories

1
Cisco
Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability2019-10-02
CVE-2019-12693 — Incorrect Type Conversion or Cast | cvebase