CVE-2013-5515

Cisco ASA <8.2(5.44)/8.3.x<8.3(2.39)/8.4.x<8.4(5.7)/8.6.x<8.6(1.12)/9.0.x<9.0(2.6)/9.1.x<9.1(1.7) DoS via HTTPS

Title source: llm

Description

The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.7), 8.6.x before 8.6(1.12), 9.0.x before 9.0(2.6), and 9.1.x before 9.1(1.7) allows remote attackers to cause a denial of service (device reload) via crafted HTTPS requests, aka Bug ID CSCua22709.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5515

Scores

EPSS 0.0135

EPSS Percentile 68.2%

Details

CWE

CWE-119

Status published

Products (40)

cisco/adaptive_security_appliance_software 8.0

cisco/adaptive_security_appliance_software 8.0\(2\)

cisco/adaptive_security_appliance_software 8.0\(3\)

cisco/adaptive_security_appliance_software 8.0\(4\)

cisco/adaptive_security_appliance_software 8.0\(5\)

cisco/adaptive_security_appliance_software 8.0\(5.28\)

cisco/adaptive_security_appliance_software 8.0\(5.31\)

cisco/adaptive_security_appliance_software 8.0.2

cisco/adaptive_security_appliance_software 8.0.3

cisco/adaptive_security_appliance_software 8.0.4

... and 30 more

Published Oct 13, 2013

Tracked Since Feb 18, 2026