Improper input validation in Cisco Adaptive Security Appliance Software
CVE-2013-1151
Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5), 8.5 before 8.5(1.17), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3) allow remote attackers to cause a denial of service (device reload) via a crafted certificate, aka Bug ID CSCuc72408.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.007 (50.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance_software — versions 7.0, 7.0\(0\), 7.0\(1\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)