Vulnerability CVE-2012-3058 - CERT Civis.Net

Vulnerability Name:

CVE-2012-3058 (CCN-76461)

Assigned:

2012-06-20

Published:

2012-06-20

Updated:

2013-03-22

Summary:

Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5 before 8.5(1.11), and 8.6 before 8.6(1.3) allow remote attackers to cause a denial of service (device reload) via IPv6 transit traffic that triggers syslog message 110003, aka Bug ID CSCua27134.

CVSS v3 Severity:

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2012-3058

Source: CCN
Type: SA49647
Cisco Adaptive Security Appliances Denial of Service Vulnerability

Source: CCN
Type: cisco-sa-20120620-asaipv6
Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability

Source: CISCO
Type: Vendor Advisory
20120620 Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability

Source: CCN
Type: OSVDB ID: 83101
Cisco Adaptive Security Appliances (ASA) IPv6 Transit Traffic Handling Remote DoS

Source: CCN
Type: BID-54106
Cisco ASA 5500 Series and Cisco Catalyst 6500 Series Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1027187

Source: XF
Type: UNKNOWN
cisco-asa-ipv6-dos(76461)

Vulnerable Configuration:

Configuration 1:

cpe:/a:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.4(1):*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.4(1.11):*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.4(2):*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.4(2.11):*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.5:*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.5(1):*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.5(1.4):*:*:*:*:*:*:*

OR cpe:/a:cisco:adaptive_security_appliance_software:8.6:*:*:*:*:*:*:*

AND

cpe:/h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6500:*:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6509-neb-a:-:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6513:-:*:*:*:*:*:*:*

OR cpe:/h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:*

Denotes that component is vulnerable