CVE-2013-1215

2013-04-2520:55:00

CWE-264

[email protected]

web.nvd.nist.gov

cisco

asa

5505

easy vpn

privilege escalation

cve-2013-1215

6.8 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295.

CPENameOperatorVersion
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq-
cisco:5500_series_adaptive_security_appliancecisco 5500 series adaptive security applianceeq*
cisco:asa_5500cisco asa 5500eq*

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	-
cisco:5500_series_adaptive_security_appliance	cisco 5500 series adaptive security appliance	eq	*
cisco:asa_5500	cisco asa 5500	eq	*