PT-2013-5593 · Cisco · Cisco Asa

Published 2013-10-09 · Updated 2023-08-15 · CVE-2013-5509

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.0 before 9.0(2.6) Cisco Adaptive Security Appliance (ASA) Software versions 9.1 before 9.1(2)

Description The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to bypass authentication and obtain VPN access or administrative access via a crafted X.509 client certificate.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software versions 9.0 before 9.0(2.6), update to version 9.0(2.6) or later. For Cisco Adaptive Security Appliance (ASA) Software versions 9.1 before 9.1(2), update to version 9.1(2) or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-5509

Affected Products

Cisco Asa

References · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5509 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5509 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa · Vendor Advisory