CVE-2013-6682

2013-11-1315:00:00

cisco

www.cve.org

cisco

asa software

vulnerability

x.509 certificate

validation

denial of service

bug id cscui33299

remote attackers

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

56.3%

JSON

The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.