Improper input validation in Cisco Adaptive Security Appliance
CVE-2012-6395
Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service (device crash) via unknown vectors, aka Bug ID CSCuc65775.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.018 (77.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance
- Cisco Adaptive_security_appliance_software — versions 8.4
- Cisco Asa_1000v_cloud_firewall
- Cisco Asa_5500
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)