CVE-2012-4659

Cisco ASA <8.2.5.30-8.3.2.34 - DoS

Title source: llm

Description

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566.

References (3)

[Third Party Advisory, VDB Entry] http://osvdb.org/86137

[Vendor Advisory] http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/55865

Scores

EPSS 0.0056

EPSS Percentile 68.0%

Classification

CWE

CWE-287

Status draft

Affected Products (21)

cisco/adaptive_security_appliance_software

cisco/5500_series_adaptive_security_appliance

cisco/catalyst_6500

cisco/catalyst_6503-e

cisco/catalyst_6504-e

... and 6 more

Timeline

Published Oct 29, 2012

Tracked Since Feb 18, 2026