Authentication flaw

2013-04-1110:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5.3), 8.5 and 8.6 before 8.6(1.10), 8.7 before 8.7(1.4), 9.0 before 9.0(1.1), and 9.1 before 9.1(1.2) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCud16590.

CPENameOperatorVersion
adaptive_security_appliance_softwareeq7.0
adaptive_security_appliance_softwareeq7.0.0
adaptive_security_appliance_softwareeq7.1.0
adaptive_security_appliance_softwareeq7.2.0
adaptive_security_appliance_softwareeq7.4.0
adaptive_security_appliance_softwareeq7.5.0
adaptive_security_appliance_softwareeq7.5.2
adaptive_security_appliance_softwareeq7.6.0
adaptive_security_appliance_softwareeq7.6.7
adaptive_security_appliance_softwareeq7.7.0

Name	Operator	Version
adaptive_security_appliance_software	eq	7.0
adaptive_security_appliance_software	eq	7.0.0
adaptive_security_appliance_software	eq	7.1.0
adaptive_security_appliance_software	eq	7.2.0
adaptive_security_appliance_software	eq	7.4.0
adaptive_security_appliance_software	eq	7.5.0
adaptive_security_appliance_software	eq	7.5.2
adaptive_security_appliance_software	eq	7.6.0
adaptive_security_appliance_software	eq	7.6.7
adaptive_security_appliance_software	eq	7.7.0