Sign-up

ID

VAR-201301-0131


CVE

CVE-2012-5717


TITLE

Cisco Adaptive Security Appliances Service disruption in ( Device crash ) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-001216

DESCRIPTION

Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of service (device crash) by establishing multiple sessions, aka Bug ID CSCtc59462. Successful exploits may allow an attacker to cause a crash, resulting in a denial-of-service condition. This issue is being tracked by Cisco bug ID CSCtc59462

Trust: 1.98

sources: NVD: CVE-2012-5717 // JVNDB: JVNDB-2013-001216 // BID: 57485 // VULHUB: VHN-58998

AFFECTED PRODUCTS

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.5

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0\(5\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0\(2\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.3

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0\(4\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.4

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.1

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0\(3\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.2

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(4.4\)

Trust: 1.0

vendor:ciscomodel:asa 5500scope:eqversion:*

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2.3

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.4

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.3\(2\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(3\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2.2

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2.1

Trust: 1.0

vendor:ciscomodel:adaptive security appliancescope:eqversion:*

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(4\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(1\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(2\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(3.9\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.3.2

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(5\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.3\(1\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.4\(1\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(4.1\)

Trust: 1.0

vendor:ciscomodel:asa 1000v cloud firewallscope:eqversion: -

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.3.1

Trust: 1.0

vendor:ciscomodel:adaptive security appliancescope: - version: -

Trust: 0.8

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.x to 8.4(1)

Trust: 0.8

vendor:ciscomodel:asa 1000v cloud firewallscope: - version: -

Trust: 0.8

vendor:ciscomodel:asa 5500 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.2.1

Trust: 0.3

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.1.2

Trust: 0.3

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.0.211

Trust: 0.3

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.4(1)

Trust: 0.3

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.1.2.25

Trust: 0.3

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.1(2)14

Trust: 0.3

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.0.4.34

Trust: 0.3

vendor:ciscomodel:adaptive security appliancescope:eqversion:8.0(4)

Trust: 0.3

sources: BID: 57485 // JVNDB: JVNDB-2013-001216 // CNNVD: CNNVD-201301-384 // NVD: CVE-2012-5717

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-5717
value: MEDIUM

Trust: 1.0

NVD: CVE-2012-5717
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201301-384
value: MEDIUM

Trust: 0.6

VULHUB: VHN-58998
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2012-5717
severity: MEDIUM
baseScore: 6.3
vectorString: AV:N/AC:M/AU:S/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 6.8
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-58998
severity: MEDIUM
baseScore: 6.3
vectorString: AV:N/AC:M/AU:S/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 6.8
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-58998 // JVNDB: JVNDB-2013-001216 // CNNVD: CNNVD-201301-384 // NVD: CVE-2012-5717

PROBLEMTYPE DATA

problemtype:CWE-264

Trust: 1.9

sources: VULHUB: VHN-58998 // JVNDB: JVNDB-2013-001216 // NVD: CVE-2012-5717

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201301-384

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201301-384

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-001216

PATCH
title:CVE-2012-5717url:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5717
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2013-001216

EXTERNAL IDS
db:NVDid:CVE-2012-5717
Trust: 2.8
db:JVNDBid:JVNDB-2013-001216
Trust: 0.8
db:CNNVDid:CNNVD-201301-384
Trust: 0.7
db:CISCOid:20130116 CISCO ADAPTIVE SECURITY APPLIANCE SSH TIMEOUT VULNERABILITY
Trust: 0.6
db:BIDid:57485
Trust: 0.4
db:VULHUBid:VHN-58998
Trust: 0.1
sources:
            
            
            VULHUB: VHN-58998 // 
            
            
            
            BID: 57485 // 
            
            
            
            JVNDB: JVNDB-2013-001216 // 
            
            
            
            CNNVD: CNNVD-201301-384 // 
            
            
            
            NVD: CVE-2012-5717

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2012-5717
Trust: 2.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-5717
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-5717
Trust: 0.8
url:http://www.cisco.com
Trust: 0.3
sources:
            
            
            VULHUB: VHN-58998 // 
            
            
            
            BID: 57485 // 
            
            
            
            JVNDB: JVNDB-2013-001216 // 
            
            
            
            CNNVD: CNNVD-201301-384 // 
            
            
            
            NVD: CVE-2012-5717

CREDITS
Cisco
Trust: 0.3
sources:
            
            
            BID: 57485

SOURCES
db:VULHUBid:VHN-58998
db:BIDid:57485
db:JVNDBid:JVNDB-2013-001216
db:CNNVDid:CNNVD-201301-384
db:NVDid:CVE-2012-5717

LAST UPDATE DATE
2024-11-23T22:08:37.800000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-58998date:2013-01-29T00:00:00
db:BIDid:57485date:2013-01-16T00:00:00
db:JVNDBid:JVNDB-2013-001216date:2013-01-22T00:00:00
db:CNNVDid:CNNVD-201301-384date:2013-01-21T00:00:00
db:NVDid:CVE-2012-5717date:2024-11-21T01:45:10.223

SOURCES RELEASE DATE
db:VULHUBid:VHN-58998date:2013-01-18T00:00:00
db:BIDid:57485date:2013-01-16T00:00:00
db:JVNDBid:JVNDB-2013-001216date:2013-01-22T00:00:00
db:CNNVDid:CNNVD-201301-384date:2013-01-21T00:00:00
db:NVDid:CVE-2012-5717date:2013-01-18T21:55:00.900