« Volver al listado

CVE-2012-4659

Estado: ModificadaAlta (7.1)—

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (11)

Cisco — 5500 Series Adaptive Security ApplianceCisco — Adaptive Security Appliance SoftwareCisco — Catalyst 6500Cisco — Catalyst 6503-eCisco — Catalyst 6504-eCisco — Catalyst 6506-eCisco — Catalyst 6509-eCisco — Catalyst 6509-neb-aCisco — Catalyst 6509-v-eCisco — Catalyst 6513Cisco — Catalyst 6513-e

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4659",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-10-29T20:55:01.150",
  "references": [
    {
      "url": "http://osvdb.org/86137",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/55865",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/86137",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/55865",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566."
    },
    {
      "lang": "es",
      "value": "La funcionalidad AAA en las implementaciones de IPv4 SSL VPN en los dispositivos Cisco Adaptive Security Appliances (ASA) 5500, y el Módulo de Servicios de ASA (ASASM) en los dispositivos Cisco Catalyst 6500, con software v8.2 antes de v8.2(5.30) y v8.3 antes de v8.3(2.34) permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) a través de una respuesta de autenticación diseñada para tal fin. Se trata de un problema también conocido como Bug ID CSCtz04566.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:45:31.807",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "785388F5-E76A-4762-B498-35F69CE537AA"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73BA05D1-78A7-4F90-9448-3F2011EE3EF3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2C6ABC8-767A-4B7D-A286-F9C6DF61AC6A"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33F24697-0124-4326-8499-29931D57D246"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3.9\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7236893-3EE9-4DBE-8A75-5294FD82E922"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97E5BC7E-399F-4FD2-8024-2F4F621BC577"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22E1D918-A52E-4892-9D0D-EE3E21853BD2"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "333BCB8C-5B17-4EF7-9BFF-0F6B038BE38F"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA8018B5-4392-4D14-A017-80D325FBCB2C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31BA0ED9-6962-4E19-89A1-1724AADEC669"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6A994D8-FAC3-41FD-AC1B-DA5D737A1E8D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CB79D96-75EA-4B4F-99A7-9AB4158B7301"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F202892E-2E58-4D77-B983-38AFA51CDBC6"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F57DF3E-4069-4EF0-917E-84CDDFCEBEEF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BE25114-ABBC-47A0-9C20-E8D40D721313"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FADD5F49-2817-40EC-861C-C922825708BD"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6509-neb-a:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E628F9C4-98C6-4A95-AF81-F1E6A56E8648"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AFF899C-1EB3-46D8-9003-EA36A68C90B3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6513:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6463491-F63E-44CB-A1D4-C029BE7D3D3D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8668D34-096B-4FC3-B9B1-0ECFD6265778"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}