VulnerabilityModified

CVE-2013-1215

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295.

MEDIUM 6.8EPSS 0.35%

Does this matter?

Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.

Description

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295.

CVSS 2.0: 6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C
EPSS: 0.35% probability · 28th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: cisco/adaptive security appliance software · cisco/5500 series adaptive security appliance · cisco/asa 5500
Source: psirt@cisco.com

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1215Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1215Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.