CVE-2012-5415
Severity Score
5.4
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.
Condición de carrera en dispositivos Cisco Adaptive Security Appliances (ASA) permite a atacantes remotos causar una denegación de servicio (consumo CPU o reinicio del dispositivo) mediante el establecimiento de múltiples conexiones, dando lugar a una incorrecta gestion de las búsquedas para flujos secundarios, también conocido como Bug IDs CSCue31622 and CSCuc71272.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-10-17 CVE Reserved
- 2013-04-16 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5415 | 2013-04-16 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | 5500 Adaptive Security Appliance Search vendor "Cisco" for product "5500 Adaptive Security Appliance" | 7.2 Search vendor "Cisco" for product "5500 Adaptive Security Appliance" and version "7.2" | 2 |
Affected
| ||||||
| Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | 7.2 Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" and version "7.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Search vendor "Cisco" for product "Adaptive Security Appliance" | * | - |
Affected
| ||||||