7.8
CVE-2011-4006
- EPSS 1.33%
- Veröffentlicht 02.05.2012 10:09:21
- Zuletzt bearbeitet 16.06.2026 23:34:17
- Erkennungen
LoginThe ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service (CPU consumption) via an unspecified closing sequence, aka Bug ID CSCtt32565.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Software Version 8.2.1
Cisco ≫ Adaptive Security Appliance Software Version 8.2.2
Cisco ≫ Adaptive Security Appliance Software Version 8.2.2 Update interim
Cisco ≫ Adaptive Security Appliance Software Version 8.2.3
Cisco ≫ Adaptive Security Appliance Software Version 8.3.1
Cisco ≫ Adaptive Security Appliance Software Version 8.3.1 Update interim
Cisco ≫ Adaptive Security Appliance Software Version 8.3.2
Cisco ≫ Adaptive Security Appliance Software Version 8.4
Cisco ≫ Adaptive Security Appliance Software Version 8.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.33% | 0.674 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.securitytracker.com/id?1027008
http://www.cisco.com/web/software/283878312/88166/ASA-851-Interim-Release-Notes.html