CVE-2012-4659 : The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series device

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566.

Published 2012-10-29 20:55:01

Updated 2023-08-11 19:03:30

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: BypassGain privilegeDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2012-4659

EPSS FAQ

0.56%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 75 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-4659

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2012-4659

Products affected by CVE-2012-4659

Cisco » Catalyst 6500
cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*
Matching versions
Cisco » 5500 Series Adaptive Security Appliance
cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6513 » Version: N/A
cpe:2.3:h:cisco:catalyst_6513:-:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6513-e » Version: N/A
cpe:2.3:h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6509-e » Version: N/A
cpe:2.3:h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6509-neb-a » Version: N/A
cpe:2.3:h:cisco:catalyst_6509-neb-a:-:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6509-v-e » Version: N/A
cpe:2.3:h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6506-e » Version: N/A
cpe:2.3:h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6504-e » Version: N/A
cpe:2.3:h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:*
Matching versions
Cisco » Catalyst 6503-e » Version: N/A
cpe:2.3:h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(1)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(2)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(3)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(3.9)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(4)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.3(1)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(4.1)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(4.4)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2(5)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.3(2)
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(2\):*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 8.2
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2012-4659

Exploit prediction scoring system (EPSS) score for CVE-2012-4659

CVSS scores for CVE-2012-4659

CWE ids for CVE-2012-4659

References for CVE-2012-4659

Products affected by CVE-2012-4659