Lucene search
HistoryOct 13, 2013 - 10:20 a.m.
CVE-2013-5509
ssl
cisco asa
authentication bypass
cve-2013-5509
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.4%
The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) allows remote attackers to bypass authentication, and obtain VPN access or administrative access, via a crafted X.509 client certificate, aka Bug ID CSCuf52468.
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch9.0
ORciscoadaptive_security_appliance_softwareMatch9.1
Related
cvelist
cvelist
CVE-2013-5509
2013-10-13 10:00:00
prion
prion
Authentication flaw
2013-10-13 10:20:00
nvd
nvd
CVE-2013-5509
2013-10-13 10:20:04
cisco
cisco
Multiple Vulnerabilities in Cisco ASA Software
2013-10-09 16:00:00
securityvulns
securityvulns
Cisco ASA / FWSM multiple security vulnerabilities
2013-10-13 00:00:00
nessus
nessus
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20131009-asa)
2013-10-17 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.4%
Related for CVE-2013-5509