Lucene search
HistoryMar 15, 2012 - 12:55 a.m.
CVE-2012-0358
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165.
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch7.0
ORciscoadaptive_security_appliance_softwareMatch7.0\(0\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(1\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(2\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(4\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(5\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(5.2\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(6\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(6.7\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(7\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(8\)
ORciscoadaptive_security_appliance_softwareMatch7.0.1
ORciscoadaptive_security_appliance_softwareMatch7.0.1.4
ORciscoadaptive_security_appliance_softwareMatch7.0.2
ORciscoadaptive_security_appliance_softwareMatch7.0.4
ORciscoadaptive_security_appliance_softwareMatch7.0.4.3
ORciscoadaptive_security_appliance_softwareMatch7.0.5
ORciscoadaptive_security_appliance_softwareMatch7.0.6
ORciscoadaptive_security_appliance_softwareMatch7.0.7
ORciscoadaptive_security_appliance_softwareMatch7.0.8
ORciscoadaptive_security_appliance_softwareMatch7.0.8interim
ORciscoadaptive_security_appliance_softwareMatch7.1
ORciscoadaptive_security_appliance_softwareMatch7.1\(2\)
ORciscoadaptive_security_appliance_softwareMatch7.1\(2.5\)
ORciscoadaptive_security_appliance_softwareMatch7.1\(2.27\)
ORciscoadaptive_security_appliance_softwareMatch7.1\(2.48\)
ORciscoadaptive_security_appliance_softwareMatch7.1\(2.49\)
ORciscoadaptive_security_appliance_softwareMatch7.1\(5\)
ORciscoadaptive_security_appliance_softwareMatch7.1.1
ORciscoadaptive_security_appliance_softwareMatch7.1.2
ORciscoadaptive_security_appliance_softwareMatch7.2
ORciscoadaptive_security_appliance_softwareMatch7.2\(1\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(1.22\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.5\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.7\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.8\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.10\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.14\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.15\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.16\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.17\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.18\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.19\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.48\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(3\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(4\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(5\)
ORciscoadaptive_security_appliance_softwareMatch7.2.1
ORciscoadaptive_security_appliance_softwareMatch7.2.2
ORciscoadaptive_security_appliance_softwareMatch7.2.3
ORciscoadaptive_security_appliance_softwareMatch7.2.4
ORciscoadaptive_security_appliance_softwareMatch7.2.5
ORciscoadaptive_security_appliance_softwareMatch8.0
ORciscoadaptive_security_appliance_softwareMatch8.0\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.0\(3\)
ORciscoadaptive_security_appliance_softwareMatch8.0\(4\)
ORciscoadaptive_security_appliance_softwareMatch8.0\(5\)
ORciscoadaptive_security_appliance_softwareMatch8.0.2
ORciscoadaptive_security_appliance_softwareMatch8.0.3
ORciscoadaptive_security_appliance_softwareMatch8.0.4
ORciscoadaptive_security_appliance_softwareMatch8.0.5
ORciscoadaptive_security_appliance_softwareMatch8.1
ORciscoadaptive_security_appliance_softwareMatch8.2\(1\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(3\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(3.9\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(4\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(4.1\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(4.4\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(5\)
ORciscoadaptive_security_appliance_softwareMatch8.2.1
ORciscoadaptive_security_appliance_softwareMatch8.2.2
ORciscoadaptive_security_appliance_softwareMatch8.2.2interim
ORciscoadaptive_security_appliance_softwareMatch8.2.3
ORciscoadaptive_security_appliance_softwareMatch8.3\(1\)
ORciscoadaptive_security_appliance_softwareMatch8.3\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.3.1
ORciscoadaptive_security_appliance_softwareMatch8.3.1interim
ORciscoadaptive_security_appliance_softwareMatch8.3.2
ORciscoadaptive_security_appliance_softwareMatch8.4
ORciscoadaptive_security_appliance_softwareMatch8.4\(1\)
ORciscoadaptive_security_appliance_softwareMatch8.4\(1.11\)
ORciscoadaptive_security_appliance_softwareMatch8.4\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.4\(2.11\)
ORciscoadaptive_security_appliance_softwareMatch8.5
ORciscoadaptive_security_appliance_softwareMatch8.6
ORciscoadaptive_security_appliance_softwareMatch8.6\(1\)
cisco5500_series_adaptive_security_appliance
Related
nessus
nessus
MS 2695962: Update Rollup for ActiveX Kill Bits (2695962)
2012-05-09 00:00:00
cisa
cisa
Cisco Releases Multiple Security Advisories
2012-03-14 00:00:00
cisco
cisco
cve
cve
CVE-2012-0358
2012-03-15 00:55:01
cert
cert
securityvulns
securityvulns
prion
prion
Buffer overflow
2012-03-15 00:55:00
openvas
openvas
Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)
2012-05-10 00:00:00
cvelist
cvelist
CVE-2012-0358
2012-03-15 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
Related for NVD:CVE-2012-0358