What is the CVSS score of CVE-2012-5415?

CVE-2012-5415 has a CVSS 2.0 base score of 5.4 (Medium). CVSS vector: AV:N/AC:H/Au:N/C:N/I:N/A:C. EPSS exploitation probability: 0.3%.

5500 Adaptive Security Appliance CVE-2012-5415

MEDIUM

Race Condition (CWE-362)

2013-04-16 psirt@cisco.com

Denial Of Service Race Condition Cisco 5500 Adaptive Security Appliance 5500 Series Adaptive Security Appliance Adaptive Security Appliance

5.4

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:H/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:N/I:N/A:C

Attack Vector

Network

Attack Complexity

High

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Apr 16, 2013 - 14:04 cve.org

MEDIUM 5.4

DescriptionCVE.org

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.

AnalysisAI

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections,. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-362. Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272. Affected products include: Cisco 5500 Adaptive Security Appliance, Cisco 5500 Series Adaptive Security Appliance, Cisco Adaptive Security Appliance.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.