What is the CVSS score of CVE-2013-1199?

CVE-2013-1199 has a CVSS 2.0 base score of 4.9 (Medium). CVSS vector: AV:N/AC:H/Au:S/C:N/I:N/A:C. EPSS exploitation probability: 0.5%.

Adaptive Security Appliance Clientless Ssl Vpn CVE-2013-1199

MEDIUM

Race Condition (CWE-362)

2013-04-18 psirt@cisco.com

Denial Of Service Race Condition Cisco Adaptive Security Appliance Clientless Ssl Vpn Adaptive Security Appliance Software Adaptive Security Appliance

4.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.9 MEDIUM

AV:N/AC:H/Au:S/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:S/C:N/I:N/A:C

Attack Vector

Network

Attack Complexity

High

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Apr 18, 2013 - 18:55 cve.org

MEDIUM 4.9

DescriptionCVE.org

Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a denial of service (device reload) by accessing resources within multiple sessions, aka Bug ID CSCub58996.

AnalysisAI

Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-362. Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a denial of service (device reload) by accessing resources within multiple sessions, aka Bug ID CSCub58996. Affected products include: Cisco Adaptive Security Appliance Clientless Ssl Vpn, Cisco Adaptive Security Appliance Software, Cisco Adaptive Security Appliance.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.