CVE-2013-1150

Description

The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5.3), 8.5 and 8.6 before 8.6(1.10), 8.7 before 8.7(1.4), 9.0 before 9.0(1.1), and 9.1 before 9.1(1.2) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCud16590.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1150
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1150

CWEs

CWE-287