Description
The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) allows remote attackers to bypass authentication, and obtain VPN access or administrative access, via a crafted X.509 client certificate, aka Bug ID CSCuf52468.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5509
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa
Scores
EPSS
0.0165
EPSS Percentile
74.1%
Details
CWE
CWE-264
Status
published
Products (2)
cisco/adaptive_security_appliance_software
9.0
cisco/adaptive_security_appliance_software
9.1
Published
Oct 13, 2013
Tracked Since
Feb 18, 2026