What is the CVSS score of CVE-2012-4659?

CVE-2012-4659 has a CVSS 2.0 base score of 7.1 (High). CVSS vector: AV:N/AC:M/Au:N/C:N/I:N/A:C. EPSS exploitation probability: 0.6%.

Adaptive Security Appliance Software CVE-2012-4659

HIGH

Improper Authentication (CWE-287)

2012-10-29 psirt@cisco.com

Denial Of Service Cisco Authentication Bypass Adaptive Security Appliance Software 5500 Series Adaptive Security Appliance Catalyst 6500 Catalyst 6503 E Catalyst 6504 E Catalyst 6506 E Catalyst 6509 E Catalyst 6509 Neb A Catalyst 6509 V E Catalyst 6513 Catalyst 6513 E

7.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:M/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:N/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Oct 29, 2012 - 20:55 cve.org

HIGH 7.1

DescriptionCVE.org

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566.

AnalysisAI

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566. Affected products include: Cisco Adaptive Security Appliance Software, Cisco 5500 Series Adaptive Security Appliance, Cisco Catalyst 6500, Cisco Catalyst 6503-E, Cisco Catalyst 6504-E. Version information: before 8.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.