PT-2015-3550 · Cisco · Cisco Asa

Published 2015-02-06 · Updated 2022-06-02 · CVE-2013-5557

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.1(.2) and earlier

Description The issue concerns the Proxy Bypass Content Rewriter feature in the WebVPN subsystem, allowing remote authenticated users to cause a denial of service, which could result in a device crash or error-recovery event. This can be triggered via an HTTP request that causes a rewrite.

Recommendations For versions 9.1(.2) and earlier, consider disabling the Proxy Bypass Content Rewriter feature in the WebVPN subsystem as a temporary workaround to prevent potential denial of service attacks until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-5557

Affected Products

Cisco Asa

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2013-5557 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150206-CVE-2013-5557 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=37383 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100694 · Note
• http://securityfocus.com/bid/72529 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5557 · Note