PT-2013-5640 · Cisco · Cisco Asa

Published 2013-11-11 · Updated 2023-08-15 · CVE-2013-5560

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.1.3 and earlier

Description The issue is related to the IPv6 implementation in Cisco ASA Software, specifically when NAT64 or NAT66 is enabled. It does not properly process NAT rules, allowing remote attackers to cause a denial of service (device reload) via crafted packets. This could allow an unauthenticated, remote attacker to cause a reload of an affected system.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software versions 9.1.3 and earlier, consider disabling NAT64 or NAT66 until a patch is available to prevent potential denial of service attacks. As a temporary workaround, restrict access to the affected system to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-5560

Affected Products

Cisco Asa

References · 5

• http://tools.cisco.com/security/center/viewAlert.x?alertId=31716 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5560 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5560 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20131111-CVE-2013-5560 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5560 · Note