CVE-2013-1155

high

Published 2013-04-11 · Modified 2026-04-29

CVSS v3

—

CVSS v2

7.8

VIR risk

7.8

Description

The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-fwsm

Application impact

Vendor	Product	Versions
cisco	firewall_services_module_software	`3.1`
cisco	firewall_services_module_software	`3.2`
cisco	firewall_services_module_software	`3.2\(1\)`
cisco	firewall_services_module_software	`3.2\(2\)`
cisco	firewall_services_module_software	`3.2\(3\)`
cisco	firewall_services_module_software	`3.2\(4\)`
cisco	firewall_services_module_software	`3.2\(5\)`
cisco	firewall_services_module_software	`3.2\(6\)`
cisco	firewall_services_module_software	`3.2\(7\)`
cisco	firewall_services_module_software	`3.2\(8\)`
cisco	firewall_services_module_software	`3.2\(9\)`
cisco	firewall_services_module_software	`3.2\(10\)`
cisco	firewall_services_module_software	`3.2\(11\)`
cisco	firewall_services_module_software	`3.2\(12\)`
cisco	firewall_services_module_software	`3.2\(13\)`
cisco	firewall_services_module_software	`3.2\(14\)`
cisco	firewall_services_module_software	`3.2\(15\)`
cisco	firewall_services_module_software	`3.2\(16\)`
cisco	firewall_services_module_software	`3.2\(17\)`
cisco	firewall_services_module_software	`3.2\(18\)`
cisco	firewall_services_module_software	`3.2\(19\)`
cisco	firewall_services_module_software	`3.2\(20\)`
cisco	firewall_services_module_software	`4.0`
cisco	firewall_services_module_software	`4.0\(1\)`
cisco	firewall_services_module_software	`4.0\(2\)`
cisco	firewall_services_module_software	`4.0\(3\)`
cisco	firewall_services_module_software	`4.0\(4\)`
cisco	firewall_services_module_software	`4.0\(5\)`
cisco	firewall_services_module_software	`4.0\(6\)`
cisco	firewall_services_module_software	`4.0\(7\)`
cisco	firewall_services_module_software	`4.0\(8\)`
cisco	firewall_services_module_software	`4.0\(10\)`
cisco	firewall_services_module_software	`4.0\(11\)`
cisco	firewall_services_module_software	`4.0\(12\)`
cisco	firewall_services_module_software	`4.0\(13\)`
cisco	firewall_services_module_software	`4.0\(14\)`
cisco	firewall_services_module_software	`4.0\(15\)`
cisco	firewall_services_module_software	`4.1`
cisco	firewall_services_module_software	`4.1\(1\)`
cisco	firewall_services_module_software	`4.1\(2\)`
cisco	firewall_services_module_software	`4.1\(3\)`
cisco	firewall_services_module_software	`4.1\(4\)`
cisco	firewall_services_module_software	`4.1\(5\)`

References

CWEs

CWE-287

Verify integrity in audit chain (admin only). AS-IS.