PT-2013-1937 · Cisco · Cisco Asa

Published 2013-01-18 · Updated 2023-08-15 · CVE-2012-6395

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4

Description The issue is related to improper validation of unspecified input concerning UNC share pathnames, which can be exploited by remote authenticated users to cause a denial of service, resulting in a device crash.

Recommendations For Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4, update the firmware to a version that properly validates input related to UNC share pathnames to prevent the denial of service.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-6395

Affected Products

Cisco Asa

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-6395 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6395 · Vendor Advisory
• http://secunia.com/advisories/51955 · Note
• http://securitytracker.com/id/1028009 · Note