Description
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/55863
Various Sources vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-fwsm
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/50857
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/86146
Various Sources vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79173
Scores
EPSS
0.0405
EPSS Percentile
89.4%
Details
CWE
CWE-119
Status
published
Products (23)
cisco/5500_series_adaptive_security_appliance
cisco/7600_router
cisco/adaptive_security_appliance_software
8.3\(1\)
cisco/adaptive_security_appliance_software
8.3\(2\)
cisco/adaptive_security_appliance_software
8.4
cisco/adaptive_security_appliance_software
8.4\(1\)
cisco/adaptive_security_appliance_software
8.4\(1.11\)
cisco/adaptive_security_appliance_software
8.4\(2\)
cisco/adaptive_security_appliance_software
8.4\(2.11\)
cisco/adaptive_security_appliance_software
8.5
... and 13 more
Published
Oct 29, 2012
Tracked Since
Feb 18, 2026