Detections
Analytics
Cisco ASA 1000V H.323 Inspection DoS
high Nessus Plugin ID 63644
Language:
Synopsis
The remote security device is missing a vendor-supplied security patch.Description
According to its self-reported model and version number, the remote Cisco ASA 1000V may be affected by a denial of service vulnerability. When H.323 inspection is enabled, processing malformed H.323 transit traffic can result in a device reload. A remote, unauthenticated attacker could exploit this to cause a denial of service.Solution
Upgrade to Cisco ASA Software 8.7(1)3 or later.See Also
Plugin Details
Severity: High
ID: 63644
File Name: cisco_asa_1000v_h323_dos.nasl
Version: 1.6
Type: local
Family: CISCO
Published: 1/22/2013
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.7
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/a:cisco:adaptive_security_appliance_software, cpe:/h:cisco:asa_1000v_cloud_firewall
Required KB Items: Host/Cisco/ASA, Host/Cisco/ASA/model
Exploit Ease: No known exploits are available
Patch Publication Date: 1/16/2013
Vulnerability Publication Date: 1/16/2013
Reference Information
CVE: CVE-2012-5419
BID: 57432