PT-2013-2960 · Cisco · Cisco Asa+1

Published 2013-04-12 · Updated 2023-08-11 · CVE-2013-1193

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) devices (affected versions not specified) Cisco Firewall Services Module (FWSM) (affected versions not specified)

Description The Secure Shell (SSH) implementation does not properly terminate sessions, allowing remote attackers to cause a denial of service (SSH service outage) by repeatedly establishing SSH connections. This could deny SSH management access to legitimate users.

Recommendations For Cisco Adaptive Security Appliances (ASA) devices, apply configuration changes to limit the number of SSH connections. For Cisco Firewall Services Module (FWSM), restrict access to the SSH function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-1193

Affected Products

Cisco Asa

Cisco Firewall Services Module

References · 3

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130412-CVE-2013-1193 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1193 · Security Note