PT-2015-3550 · Cisco · Cisco Asa

Publicado 2015-02-06 · Atualizado 2022-06-02 · CVE-2013-5557

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.1(.2) and earlier

Description The issue concerns the Proxy Bypass Content Rewriter feature in the WebVPN subsystem, allowing remote authenticated users to cause a denial of service, which could result in a device crash or error-recovery event. This can be triggered via an HTTP request that causes a rewrite.

Recommendations For versions 9.1(.2) and earlier, consider disabling the Proxy Bypass Content Rewriter feature in the WebVPN subsystem as a temporary workaround to prevent potential denial of service attacks until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2013-5557

Produtos afetados

Cisco Asa

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/100694 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5557 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557 · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150206-CVE-2013-5557 · Aviso do Fabricante
• http://securityfocus.com/bid/72529 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=37383 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5557 · Nota