« Volver al listado

CVE-2012-2472

Estado: ModificadaAlta (7.8)—

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — 5500 Series Adaptive Security ApplianceCisco — Adaptive Security Appliance Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2472",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-08-06T17:55:00.963",
  "references": [
    {
      "url": "http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143."
    },
    {
      "lang": "es",
      "value": "Dispositivos Cisco Adaptive Security Appliances (ASA) 5500 con software 8.2 y 8.4, cuando la inspección SIP está activada, crea idénticas pre-asignados secundarios, que podrían permitir a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través diseñado el tráfico SIP , también conocido como Bug ID CSCtz63143."
    }
  ],
  "lastModified": "2026-06-16T23:41:35.680",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "785388F5-E76A-4762-B498-35F69CE537AA"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73BA05D1-78A7-4F90-9448-3F2011EE3EF3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2C6ABC8-767A-4B7D-A286-F9C6DF61AC6A"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33F24697-0124-4326-8499-29931D57D246"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3.9\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7236893-3EE9-4DBE-8A75-5294FD82E922"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97E5BC7E-399F-4FD2-8024-2F4F621BC577"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22E1D918-A52E-4892-9D0D-EE3E21853BD2"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "333BCB8C-5B17-4EF7-9BFF-0F6B038BE38F"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA8018B5-4392-4D14-A017-80D325FBCB2C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F2C8AFA-A4B6-44A2-B00C-1950997493C0"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "465313C5-BFB9-458A-8150-8F7BA1F8C386"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C808D46-C846-4C53-A713-150C3FED3FAB"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C15D1F6-997D-47FD-A654-AEF3332E6105"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A914DE5-2269-451A-823A-B26AE1A7F980"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69683734-528F-488A-8A90-8478FA27B97E"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1.11\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95EC2D6C-84BA-4A58-B4A0-6FF8613AF9C0"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "691166C2-1FBD-46EB-8AA5-FCE303444ACD"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2.11\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4956430E-BEC1-4788-B0D2-E50E36C70306"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CB79D96-75EA-4B4F-99A7-9AB4158B7301"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}