HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2012-4660

CVSS 7.8v2.0pub. 2012-10-29upd. 2026-04-29

The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17), 8.3 before 8.3(2.28), 8.4 before 8.4(2.13), 8.5 before 8.5(1.4), and 8.6 before 8.6(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted SIP media-update packet, aka Bug ID CSCtr63728.

CVSS Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C
  • Cisco 5500 Series Adaptive Security Appliance

    HW
    Cisco
    all versions
  • Cisco Adaptive Security Appliance Software

    OS
    Cisco
    8.28.2\(1\)8.2\(2\)8.2\(3\)8.2\(3.9\)8.2\(4\)8.2\(4.1\)8.2\(4.4\)8.2\(5\)8.3\(1\)8.3\(2\)8.48.4\(1\)8.4\(1.11\)8.4\(2\)+ 5 more
  • Cisco Catalyst 6500

    HW
    Cisco
    all versions
  • Cisco Catalyst 6503 E

    HW
    Cisco
    all versions
  • Cisco Catalyst 6504 E

    HW
    Cisco
    all versions
  • Cisco Catalyst 6506 E

    HW
    Cisco
    all versions
  • Cisco Catalyst 6509 E

    HW
    Cisco
    all versions
  • Cisco Catalyst 6509 Neb A

    HW
    Cisco
    all versions
  • Cisco Catalyst 6509 V E

    HW
    Cisco
    all versions
  • Cisco Catalyst 6513

    HW
    Cisco
    all versions
  • Cisco Catalyst 6513 E

    HW
    Cisco
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2025-20333CRITICAL9.9⚠ KEVPL ✓same product

RCE jako root w Cisco ASA i FTD poprzez podatny serwer VPN web

CVE-2025-20363CRITICAL9.0PL ✓same product

RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP

CVE-2024-20329CRITICAL9.9PL ✓same product

RCE w podsystemie SSH Cisco ASA — wykonanie poleceń jako root

CVE-2020-3125CRITICAL9.8PL ✓same product

Cisco ASA — obejście uwierzytelniania Kerberos w VPN (Auth Bypass)

CVE-2020-3187CRITICAL9.1PL ✓same product

Path Traversal w Cisco ASA i FTD — nieautoryzowany dostęp do plików przez WebVPN/AnyConnect