5.4
CVE-2013-5560
- EPSS 2.03%
- Veröffentlicht 13.11.2013 15:55:03
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Erkennungen
The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCue34342.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Software Version <= 9.1\(3\)
Cisco ≫ Adaptive Security Appliance Software Version 7.0
Cisco ≫ Adaptive Security Appliance Software Version 7.0.1
Cisco ≫ Adaptive Security Appliance Software Version 7.0.1.4
Cisco ≫ Adaptive Security Appliance Software Version 7.0.2
Cisco ≫ Adaptive Security Appliance Software Version 7.0.4
Cisco ≫ Adaptive Security Appliance Software Version 7.0.4.3
Cisco ≫ Adaptive Security Appliance Software Version 7.0.5
Cisco ≫ Adaptive Security Appliance Software Version 7.0.6
Cisco ≫ Adaptive Security Appliance Software Version 7.0.7
Cisco ≫ Adaptive Security Appliance Software Version 7.0.8
Cisco ≫ Adaptive Security Appliance Software Version 7.0.8 Update interim
Cisco ≫ Adaptive Security Appliance Software Version 7.1
Cisco ≫ Adaptive Security Appliance Software Version 7.1.1
Cisco ≫ Adaptive Security Appliance Software Version 7.1.2
Cisco ≫ Adaptive Security Appliance Software Version 7.2
Cisco ≫ Adaptive Security Appliance Software Version 7.2.1
Cisco ≫ Adaptive Security Appliance Software Version 7.2.2
Cisco ≫ Adaptive Security Appliance Software Version 7.2.3
Cisco ≫ Adaptive Security Appliance Software Version 7.2.4
Cisco ≫ Adaptive Security Appliance Software Version 7.2.5
Cisco ≫ Adaptive Security Appliance Software Version 8.0
Cisco ≫ Adaptive Security Appliance Software Version 8.0.2
Cisco ≫ Adaptive Security Appliance Software Version 8.0.3
Cisco ≫ Adaptive Security Appliance Software Version 8.0.4
Cisco ≫ Adaptive Security Appliance Software Version 8.0.5
Cisco ≫ Adaptive Security Appliance Software Version 8.1
Cisco ≫ Adaptive Security Appliance Software Version 8.2
Cisco ≫ Adaptive Security Appliance Software Version 8.2.1
Cisco ≫ Adaptive Security Appliance Software Version 8.2.2
Cisco ≫ Adaptive Security Appliance Software Version 8.2.2 Update interim
Cisco ≫ Adaptive Security Appliance Software Version 8.2.3
Cisco ≫ Adaptive Security Appliance Software Version 8.3.1
Cisco ≫ Adaptive Security Appliance Software Version 8.3.1 Update interim
Cisco ≫ Adaptive Security Appliance Software Version 8.3.2
Cisco ≫ Adaptive Security Appliance Software Version 8.4
Cisco ≫ Adaptive Security Appliance Software Version 8.5
Cisco ≫ Adaptive Security Appliance Software Version 8.6
Cisco ≫ Adaptive Security Appliance Software Version 8.7
Cisco ≫ Adaptive Security Appliance Software Version 8.7.1
Cisco ≫ Adaptive Security Appliance Software Version 8.7.1.1
Cisco ≫ Adaptive Security Appliance Software Version 9.0
Cisco ≫ Adaptive Security Appliance Software Version 9.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.03% | 0.785 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.4 | 4.9 | 6.9 |
AV:N/AC:H/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5560
http://tools.cisco.com/security/center/viewAlert.x?alertId=31716