Vulnerability in Cisco Adaptive Security Appliance
CVE-2012-5717
Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of service (device crash) by establishing multiple sessions, aka Bug ID CSCtc59462.
EPSS: 0.013 (68.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance
- Cisco Adaptive_security_appliance_software — versions 8.3\(2\), 8.2\(5\), 8.2\(4\)
- Cisco Asa_1000v_cloud_firewall
- Cisco Asa_5500
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)