Lucene search

[email protected]CVE-2012-2472

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-2472

2022-10-0316:15:37

CWE-399

[email protected]

web.nvd.nist.gov

cisco

asa

sip

inspection

dos

vulnerability

cve-2012-2472

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

JSON

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.

Affected configurations

NVD

Node

ciscoadaptive_security_appliance_softwareMatch8.2

ciscoadaptive_security_appliance_softwareMatch8.2\(1\)

ciscoadaptive_security_appliance_softwareMatch8.2\(2\)

ciscoadaptive_security_appliance_softwareMatch8.2\(3\)

ciscoadaptive_security_appliance_softwareMatch8.2\(3.9\)

ciscoadaptive_security_appliance_softwareMatch8.2\(4\)

ciscoadaptive_security_appliance_softwareMatch8.2\(4.1\)

ciscoadaptive_security_appliance_softwareMatch8.2\(4.4\)

ciscoadaptive_security_appliance_softwareMatch8.2\(5\)

ciscoadaptive_security_appliance_softwareMatch8.2.1

ciscoadaptive_security_appliance_softwareMatch8.2.2

ciscoadaptive_security_appliance_softwareMatch8.2.2interim

ciscoadaptive_security_appliance_softwareMatch8.2.3

ciscoadaptive_security_appliance_softwareMatch8.4

ciscoadaptive_security_appliance_softwareMatch8.4\(1\)

ciscoadaptive_security_appliance_softwareMatch8.4\(1.11\)

ciscoadaptive_security_appliance_softwareMatch8.4\(2\)

ciscoadaptive_security_appliance_softwareMatch8.4\(2.11\)

AND

cisco5500_series_adaptive_security_appliance

CPENameOperatorVersion
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(1\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(2\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(3\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(3.9\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(4\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(4.1\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(4.4\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2\(5\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2.1

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(1\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(2\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(3\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(3.9\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(4\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(4.1\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(4.4\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2\(5\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2.1

Rows per page:

1-10 of 181

References

www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html

Social References

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

JSON

Related for CVE-2012-2472

prion1 nvd1 cvelist1 nessus1