- Description
- Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120.
- Source
- cve@mitre.org
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 7.1
- Impact score
- 6.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:C
- nvd@nist.gov
- CWE-20
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:adaptive_security_appliance:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "407FE280-817B-4164-8E70-32A029448E34"
},
{
"criteria": "cpe:2.3:h:cisco:pix_500:*:7.1_software:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5BD22EB-5815-41EE-8706-27B60DA88F55"
},
{
"criteria": "cpe:2.3:h:cisco:pix_500:*:7.2_software:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62710520-B1F2-40B0-9CF8-D196DD578D66"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E623855-FB2B-4B8A-85E8-B8DC29A3FBB0"
}
],
"operator": "OR"
}
]
}
]