CVE-2013-5511
Estado: ModificadaAlta (10)—
The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.7), 9.0.x before 9.0(3.1), and 9.1.x before 9.1(2.6) does not properly implement the authentication-certificate option, which allows remote attackers to bypass authentication via a TCP session to an ASDM interface, aka Bug ID CSCuh44815.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.30%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-287
Referencias
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5511
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5511
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-5511",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-10-13T10:20:04.333",
"references": [
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5511",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5511",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.7), 9.0.x before 9.0(3.1), and 9.1.x before 9.1(2.6) does not properly implement the authentication-certificate option, which allows remote attackers to bypass authentication via a TCP session to an ASDM interface, aka Bug ID CSCuh44815."
},
{
"lang": "es",
"value": "La funcionalidad de gestión remota de Adaptive Security Device Management (ASDM) en Cisco Adaptive Security Appliance (ASA) Software 8.2.x anteriores a 8.2(5.46), 8.3.x anteriores a 8.3(2.39), 8.4.x anteriores a 8.4(6), 8.5.x anteriores a 8.5(1.18), 8.6.x anteriores a 8.6(1.12), 8.7.x anteriores a 8.7(1.7), 9.0.x anteriores a 9.0(3.1), y 9.1.x anteriores a 9.1(2.6) no implementa correctamente la opción de certificado de autenticación, lo cual permite a atacantes remotos sortear la autenticación a través de una sesión TCP a una interfaz ASDM, también conocido como Bug ID CSCuh44815."
}
],
"lastModified": "2026-06-16T23:58:56.350",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "785388F5-E76A-4762-B498-35F69CE537AA"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73BA05D1-78A7-4F90-9448-3F2011EE3EF3"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2C6ABC8-767A-4B7D-A286-F9C6DF61AC6A"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33F24697-0124-4326-8499-29931D57D246"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3.9\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7236893-3EE9-4DBE-8A75-5294FD82E922"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E5BC7E-399F-4FD2-8024-2F4F621BC577"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E1D918-A52E-4892-9D0D-EE3E21853BD2"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "333BCB8C-5B17-4EF7-9BFF-0F6B038BE38F"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA8018B5-4392-4D14-A017-80D325FBCB2C"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5.35\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4411AB6B-FC27-45B6-A9D3-45DB64D14357"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5.38\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13E658D9-155B-4567-A3F8-5F45F53457CD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F2C8AFA-A4B6-44A2-B00C-1950997493C0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "465313C5-BFB9-458A-8150-8F7BA1F8C386"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C808D46-C846-4C53-A713-150C3FED3FAB"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C15D1F6-997D-47FD-A654-AEF3332E6105"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31BA0ED9-6962-4E19-89A1-1724AADEC669"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6A994D8-FAC3-41FD-AC1B-DA5D737A1E8D"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2.34\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37D8E4C6-9CF5-40DD-852E-B9623CDBE5B0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2.37\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03794CAA-06A3-4FD8-BF00-B9A7BAE59704"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5990B883-0B5A-44F0-B4DC-8031ED0F2026"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:interim:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5A002AD-3EB0-43CB-AFAF-4A44DAF11007"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7F417BC-5835-4F29-8DB6-03A62B7B2364"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A914DE5-2269-451A-823A-B26AE1A7F980"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69683734-528F-488A-8A90-8478FA27B97E"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95EC2D6C-84BA-4A58-B4A0-6FF8613AF9C0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691166C2-1FBD-46EB-8AA5-FCE303444ACD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4956430E-BEC1-4788-B0D2-E50E36C70306"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0271E71-11A1-410F-A34B-5E90FE009D4B"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(4.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "747A3577-3D68-4F23-B465-5A40035C2246"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7DC22FC-55C8-4B87-96BF-BE058E958BB4"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "310B4795-4BC3-4F47-8F54-C513ECC2C9F9"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9E87F3D-669C-4451-A4C4-E8FE04769248"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1.4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4154E951-DE5D-4D48-B5BA-B3CCDDA3FBA2"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1.17\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02BF5B23-58BD-4D1F-9F5B-30EE518E8D23"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BFCE154-6582-49E2-9B9D-641986B7D653"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "563181F6-6A37-496B-AE25-0D03214BA7BD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6\\(1.3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62558016-D31D-405E-A264-40DBBDF23887"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6\\(1.10\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CF663E3-9CA5-4E11-B58F-CAC012F2C397"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7\\(1.3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4FDA1C7-3CFC-4DFC-8DE7-ED54636ED1A0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04C8C6E9-D5C3-42DC-B431-9097B2FCCB52"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75B5CF41-7F01-4AE9-B54B-8DB6909504B6"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F995B807-32A2-401F-99D5-FBBA8B69E844"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B64230D9-75E1-40C0-8889-43F1035F5B60"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(1.7\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D234DF9-39EB-4AD3-942A-0AED8D11F5D7"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}