CVE-2012-4643
The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
- Puntuación base: 7.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.53%
- Percentil entre todas las CVEs puntuadas: 74
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
CWE
- CWE-399
Referencias
- http://osvdb.org/86145
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa
- http://www.securityfocus.com/bid/55861
- http://osvdb.org/86145
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa
- http://www.securityfocus.com/bid/55861
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-4643",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-10-29T20:55:01.103",
"references": [
{
"url": "http://osvdb.org/86145",
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/55861",
"source": "psirt@cisco.com"
},
{
"url": "http://osvdb.org/86145",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/55861",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068."
},
{
"lang": "es",
"value": "El servidor DHCP en dispositivos Cisco de las series Adaptive Security Appliances (ASA) 5500, y ASA Services Module (ASASM) en dispositivos Cisco de la serie Catalyst 6500, con software v7.0 anterior a v7.2(5.8), v7.1 anterior a v7.2(5.8), v7.2 anterior a v7.2(5.8), v8.0 anterior a v8.0(5.28), v8.1 anterior a v8.1(2.56), v8.2 anterior a v8.2(5.27), v8.3 anterior a v8.3(2.31), v8.4 anterior a v8.4(3.10), v8.5 anterior a v8.5(1.9), y v8.6 anterior a v8.6(1.5) no posiciona en memoria de forma adecuada los paquetes DHCP, lo que permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de una serie de paquetes IPv4 manipulados, también conocido como Bus ID CSCtw84068."
}
],
"lastModified": "2026-06-16T23:45:31.370",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85ED2D96-5CC9-4851-986A-C9ED5E2D96CB"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(0\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15ECB359-7290-4732-96F2-AFCEE21C7899"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88102B08-48E8-48FD-81E9-FAF717D6BE34"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DA2F01C-ECF1-477B-A413-75D0EB817079"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC150564-7413-401A-9DD8-8AD773F1D8F9"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0714F9E-75AD-4405-BBC3-E0D817C05EF6"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(5.2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9649696-DE81-48C7-A276-17E1ECADAD5B"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E623855-FB2B-4B8A-85E8-B8DC29A3FBB0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1557499-D1A1-4A26-80DA-A3D66AA53580"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1\\(2.5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2649C78C-D742-4E6F-950F-54BF7CF797C3"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1\\(2.27\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "469CFE0C-6319-46F3-8D31-4850F5E6A830"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1\\(2.48\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4333600F-0277-4D6C-922E-53FA01CF3C2E"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1\\(2.49\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35AFDFE9-CCC9-453B-A081-939D1D554379"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C82C545-6796-4B67-A97D-0435D41C63C5"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C926091-D9A6-4264-8E9A-52AFCBC09D34"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE82E4AC-BE77-4A45-839F-45163D64A4C0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(1.22\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B84E46E-E5CA-4EEC-87C3-FD818EA37DFE"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95B934A6-6C23-4A3F-A5F1-BCE0F0F3295A"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B25C03A-CADD-4B10-B4C9-674A4DEBDEE9"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.7\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B521F270-2D51-48BE-BC29-0EDED33FA30B"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.8\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39BA51CC-2ADA-4527-8D47-D821BBFA5EFC"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.10\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C73F417-0CF4-4E78-9B33-939F0E41994E"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.14\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67BABA2F-EE28-4914-8130-6768EC599B65"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.15\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C912270C-6ABB-4149-8E67-96028B45C312"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.16\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB2631B6-F238-4FE3-AA34-703FFB6D6803"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.17\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80F1C112-F1C1-4703-8EE0-2FC9F8B233CD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.18\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D55D3385-FEE7-44AA-A65A-50924FDC1BFC"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.19\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC223DE2-90CA-43CD-8EBF-C9C351D10187"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(2.48\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3DF7D4C-48F4-4138-80EA-7AEEB8AFE498"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD3AD5D9-DD5E-4D31-9F11-94A6147F59A9"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FC1CE86-6FD4-44D4-A3E6-D49B9CAAA0B2"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F0864E8-E9C5-498D-84F4-4DE02FF4852A"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "788C1177-EA1F-4C89-B4D2-C3939C45472C"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31E7CB8A-17DF-43EB-9BCB-F2E5293C949F"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAFE1219-5B88-4A41-B1FA-0E3BA9FDA14A"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04B97D0B-974E-48E7-A5F1-AB572ACB7829"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2185ED62-166C-4F43-ACA2-C1EF43C48D47"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "785388F5-E76A-4762-B498-35F69CE537AA"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73BA05D1-78A7-4F90-9448-3F2011EE3EF3"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2C6ABC8-767A-4B7D-A286-F9C6DF61AC6A"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33F24697-0124-4326-8499-29931D57D246"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3.9\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7236893-3EE9-4DBE-8A75-5294FD82E922"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E5BC7E-399F-4FD2-8024-2F4F621BC577"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E1D918-A52E-4892-9D0D-EE3E21853BD2"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "333BCB8C-5B17-4EF7-9BFF-0F6B038BE38F"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA8018B5-4392-4D14-A017-80D325FBCB2C"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31BA0ED9-6962-4E19-89A1-1724AADEC669"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6A994D8-FAC3-41FD-AC1B-DA5D737A1E8D"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A914DE5-2269-451A-823A-B26AE1A7F980"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69683734-528F-488A-8A90-8478FA27B97E"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95EC2D6C-84BA-4A58-B4A0-6FF8613AF9C0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691166C2-1FBD-46EB-8AA5-FCE303444ACD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4956430E-BEC1-4788-B0D2-E50E36C70306"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "310B4795-4BC3-4F47-8F54-C513ECC2C9F9"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9E87F3D-669C-4451-A4C4-E8FE04769248"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1.4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4154E951-DE5D-4D48-B5BA-B3CCDDA3FBA2"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BFCE154-6582-49E2-9B9D-641986B7D653"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "563181F6-6A37-496B-AE25-0D03214BA7BD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CB79D96-75EA-4B4F-99A7-9AB4158B7301"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F202892E-2E58-4D77-B983-38AFA51CDBC6"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F57DF3E-4069-4EF0-917E-84CDDFCEBEEF"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BE25114-ABBC-47A0-9C20-E8D40D721313"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FADD5F49-2817-40EC-861C-C922825708BD"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6509-neb-a:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E628F9C4-98C6-4A95-AF81-F1E6A56E8648"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AFF899C-1EB3-46D8-9003-EA36A68C90B3"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6513:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6463491-F63E-44CB-A1D4-C029BE7D3D3D"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8668D34-096B-4FC3-B9B1-0ECFD6265778"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}