CVE-2013-5511
Published Oct 13, 2013
Last updated a year ago
Overview
- Description
- The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.7), 9.0.x before 9.0(3.1), and 9.1.x before 9.1(2.6) does not properly implement the authentication-certificate option, which allows remote attackers to bypass authentication via a TCP session to an ASDM interface, aka Bug ID CSCuh44815.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-287
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "785388F5-E76A-4762-B498-35F69CE537AA"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73BA05D1-78A7-4F90-9448-3F2011EE3EF3"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2C6ABC8-767A-4B7D-A286-F9C6DF61AC6A"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33F24697-0124-4326-8499-29931D57D246"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(3.9\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7236893-3EE9-4DBE-8A75-5294FD82E922"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E5BC7E-399F-4FD2-8024-2F4F621BC577"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E1D918-A52E-4892-9D0D-EE3E21853BD2"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(4.4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "333BCB8C-5B17-4EF7-9BFF-0F6B038BE38F"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA8018B5-4392-4D14-A017-80D325FBCB2C"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5.35\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4411AB6B-FC27-45B6-A9D3-45DB64D14357"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\\(5.38\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13E658D9-155B-4567-A3F8-5F45F53457CD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F2C8AFA-A4B6-44A2-B00C-1950997493C0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "465313C5-BFB9-458A-8150-8F7BA1F8C386"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C808D46-C846-4C53-A713-150C3FED3FAB"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C15D1F6-997D-47FD-A654-AEF3332E6105"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31BA0ED9-6962-4E19-89A1-1724AADEC669"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6A994D8-FAC3-41FD-AC1B-DA5D737A1E8D"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2.34\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37D8E4C6-9CF5-40DD-852E-B9623CDBE5B0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(2.37\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03794CAA-06A3-4FD8-BF00-B9A7BAE59704"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5990B883-0B5A-44F0-B4DC-8031ED0F2026"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:interim:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5A002AD-3EB0-43CB-AFAF-4A44DAF11007"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7F417BC-5835-4F29-8DB6-03A62B7B2364"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A914DE5-2269-451A-823A-B26AE1A7F980"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69683734-528F-488A-8A90-8478FA27B97E"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(1.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95EC2D6C-84BA-4A58-B4A0-6FF8613AF9C0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691166C2-1FBD-46EB-8AA5-FCE303444ACD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(2.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4956430E-BEC1-4788-B0D2-E50E36C70306"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0271E71-11A1-410F-A34B-5E90FE009D4B"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(4.11\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "747A3577-3D68-4F23-B465-5A40035C2246"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7DC22FC-55C8-4B87-96BF-BE058E958BB4"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "310B4795-4BC3-4F47-8F54-C513ECC2C9F9"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9E87F3D-669C-4451-A4C4-E8FE04769248"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1.4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4154E951-DE5D-4D48-B5BA-B3CCDDA3FBA2"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\\(1.17\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02BF5B23-58BD-4D1F-9F5B-30EE518E8D23"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BFCE154-6582-49E2-9B9D-641986B7D653"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "563181F6-6A37-496B-AE25-0D03214BA7BD"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6\\(1.3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62558016-D31D-405E-A264-40DBBDF23887"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6\\(1.10\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CF663E3-9CA5-4E11-B58F-CAC012F2C397"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7\\(1.3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4FDA1C7-3CFC-4DFC-8DE7-ED54636ED1A0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04C8C6E9-D5C3-42DC-B431-9097B2FCCB52"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75B5CF41-7F01-4AE9-B54B-8DB6909504B6"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F995B807-32A2-401F-99D5-FBBA8B69E844"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B64230D9-75E1-40C0-8889-43F1035F5B60"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(1.7\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D234DF9-39EB-4AD3-942A-0AED8D11F5D7"
}
],
"operator": "OR"
}
]
}
]