CVE-2013-3382

The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (device reload or traffic-processing outage) via fragmented (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCue88387.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw	Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.1:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.2:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.3:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.4:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.5:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.6:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.7:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.1.8:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.1:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.2:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.3:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.4:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.5:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.6:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.7:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.8:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.9:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.10:::::::*
	cpe:2.3:h:cisco:adaptive_security_appliance:9.1.2.11:::::::*

History

21 Nov 2024, 01:53

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw - Vendor Advisory

Information

Published : 2013-06-26 19:55

Updated : 2024-11-21 01:53

NVD link : CVE-2013-3382

Mitre link : CVE-2013-3382

CVE.ORG link : CVE-2013-3382

JSON object : View

Products Affected

cisco

adaptive_security_appliance

CWE

CWE-20

Improper Input Validation

7.8 /10