VulnerabilityModified
CVE-2012-6395
Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service (device crash) via unknown vectors, aka…
MEDIUM 6.3EPSS 1.85%
Does this matter?
Lower severity and a low EPSS score (1.85%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service (device crash) via unknown vectors, aka Bug ID CSCuc65775.
- CVSS 2.0
- 6.3 MEDIUMAV:N/AC:M/Au:S/C:N/I:N/A:C
- EPSS
- 1.85% probability · 78th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/adaptive security appliance software · cisco/adaptive security appliance · cisco/asa 1000v cloud firewall · cisco/asa 5500
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/51955
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6395Vendor Advisory
- http://www.securitytracker.com/id/1028009
- http://secunia.com/advisories/51955
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6395Vendor Advisory
- http://www.securitytracker.com/id/1028009
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.