HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2012-4659

CVSS 7.1v2.0pub. 2012-10-29upd. 2026-04-29

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566.

CVSS Vector
AV:N/AC:M/Au:N/C:N/I:N/A:C

  • Cisco 5500 Series Adaptive Security Appliance

    HW
    Cisco
    all versions

  • Cisco Adaptive Security Appliance Software

    OS
    Cisco
    8.28.2\(1\)8.2\(2\)8.2\(3\)8.2\(3.9\)8.2\(4\)8.2\(4.1\)8.2\(4.4\)8.2\(5\)8.3\(1\)8.3\(2\)

  • Cisco Catalyst 6500

    HW
    Cisco
    all versions

  • Cisco Catalyst 6503 E

    HW
    Cisco
    all versions

  • Cisco Catalyst 6504 E

    HW
    Cisco
    all versions

  • Cisco Catalyst 6506 E

    HW
    Cisco
    all versions

  • Cisco Catalyst 6509 E

    HW
    Cisco
    all versions

  • Cisco Catalyst 6509 Neb A

    HW
    Cisco
    all versions

  • Cisco Catalyst 6509 V E

    HW
    Cisco
    all versions

  • Cisco Catalyst 6513

    HW
    Cisco
    all versions

  • Cisco Catalyst 6513 E

    HW
    Cisco
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoSVPNAuth Bypass
CWE
References

Related vulnerabilities

CVE-2025-20333CRITICAL9.9⚠ KEVPL ✓same product

RCE jako root w Cisco ASA i FTD poprzez podatny serwer VPN web

CVE-2025-20363CRITICAL9.0PL ✓same product

RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP

CVE-2024-20329CRITICAL9.9PL ✓same product

RCE w podsystemie SSH Cisco ASA — wykonanie poleceń jako root

CVE-2020-3125CRITICAL9.8PL ✓same product

Cisco ASA — obejście uwierzytelniania Kerberos w VPN (Auth Bypass)

CVE-2020-3187CRITICAL9.1PL ✓same product

Path Traversal w Cisco ASA i FTD — nieautoryzowany dostęp do plików przez WebVPN/AnyConnect