Vulnerability in Cisco Adaptive Security Appliance Software
CVE-2013-1195
The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic during denied time periods, aka Bug IDs CSCuf79091 and CSCug45850.
EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance_software
- Cisco Firewall_services_module
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)