CVE-2012-5415

EPSS 0.33%
Published 16.04.2013 14:04:30
Last modified 11.04.2025 00:51:21
Source psirt@cisco.com
Teams watchlist Login
Open Login

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ 5500 Adaptive Security Appliance Version7.2 Update2

Cisco ≫ 5500 Series Adaptive Security Appliance

Cisco ≫ 5500 Series Adaptive Security Appliance Version7.2

Cisco ≫ Adaptive Security Appliance

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.33%	0.529

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.4	4.9	6.9	AV:N/AC:H/Au:N/C:N/I:N/A:C

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5415

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2012-5415

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-5415

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-5415

EUVD