PT-2012-2516 · Cisco · Cisco Asa+2

Published 2012-03-14 · Updated 2023-08-15 · CVE-2012-0355

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices versions 8.4 before 8.4(2.11) Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices versions 8.5 before 8.5(1.4)

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via IPv4 or IPv6 packets that trigger a specific syslog message.

Recommendations For versions 8.4 before 8.4(2.11), update to version 8.4(2.11) or later to resolve the issue. For versions 8.5 before 8.5(1.4), update to version 8.5(1.4) or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-0355

Affected Products

Asa Services Module

Cisco Asa

Cisco Catalyst 6500 Series

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0355 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa · Vendor Advisory
• http://osvdb.org/80045 · Note
• http://securityfocus.com/bid/52488 · Note
• http://securitytracker.com/id?1026800 · Note
• http://secunia.com/advisories/48423 · Note