PT-2013-5592 · Cisco · Firewall Services Module+1

Published 2013-10-09 · Updated 2023-08-15 · CVE-2013-5508

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 7.x through 7.2(5.11) Cisco Adaptive Security Appliance (ASA) Software versions 8.x through 8.2(5.43) Cisco Adaptive Security Appliance (ASA) Software versions 8.3.x through 8.3(2.38) Cisco Adaptive Security Appliance (ASA) Software versions 8.4.x through 8.4(5) Cisco Adaptive Security Appliance (ASA) Software versions 8.5.x through 8.5(1.17) Cisco Adaptive Security Appliance (ASA) Software versions 8.6.x through 8.6(1.11) Cisco Adaptive Security Appliance (ASA) Software versions 8.7.x through 8.7(1.5) Cisco Adaptive Security Appliance (ASA) Software versions 9.0.x through 9.0(2.9) Cisco Adaptive Security Appliance (ASA) Software versions 9.1.x through 9.1(1) Firewall Services Module (FWSM) versions 3.1.x through 3.2(26) Firewall Services Module (FWSM) versions 4.x through 4.1(13)

Description The SQL*Net inspection engine allows remote attackers to cause a denial of service (device reload) via crafted segmented Transparent Network Substrate (TNS) packets.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software versions 7.x through 7.2(5.11), update to version 7.2(5.12) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 8.x through 8.2(5.43), update to version 8.2(5.44) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 8.3.x through 8.3(2.38), update to version 8.3(2.39) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 8.4.x through 8.4(5), update to version 8.4(6) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 8.5.x through 8.5(1.17), update to version 8.5(1.18) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 8.6.x through 8.6(1.11), update to version 8.6(1.12) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 8.7.x through 8.7(1.5), update to version 8.7(1.6) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 9.0.x through 9.0(2.9), update to version 9.0(2.10) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 9.1.x through 9.1(1), update to version 9.1(2) or later. For Firewall Services Module (FWSM) versions 3.1.x through 3.2(26), update to version 3.2(27) or later. For Firewall Services Module (FWSM) versions 4.x through 4.1(13), update to version 4.1(14) or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-5508

Affected Products

Cisco Asa

Firewall Services Module

References · 6

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-fwsm · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5508 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5508 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa · Vendor Advisory
• https://t.me/cvenotify/56305 · Telegram Post