Vulnerability in Cisco 5500 Series Adaptive Security Appliance
CVE-2011-2060
The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(5.3), 8.3 before 8.3(2.20), and 8.4 before 8.4(2.1) does not properly handle non-ASCII characters in an interface description, which allows local users to cause a denial of service (reload without configuration) via a crafted description, aka Bug ID CSCtq50523.
EPSS: 0.003 (18.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco 5500_series_adaptive_security_appliance
- Cisco Adaptive_security_appliance_software — versions 7.0, 7.0\(0\), 7.0\(1\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM)