CVE-2013-5515: Buffer Overflow
The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.7), 8.6.x before 8.6(1.12), 9.0.x before 9.0(2.6), and 9.1.x before 9.1(1.7) allows remote attackers to cause a denial of service (device reload) via crafted HTTPS requests, aka Bug ID CSCua22709.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5515?
CVE-2013-5515 is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2013-5515?
To mitigate CVE-2013-5515, upgrade to a Cisco Adaptive Security Appliance Software version that is 8.2(5.44) or later, 8.3(2.39) or later, and so on as specified in the advisory.
What systems are affected by CVE-2013-5515?
CVE-2013-5515 affects multiple versions of Cisco Adaptive Security Appliance Software, specifically versions prior to 8.2(5.44), 8.3(2.39), and several others listed in the advisory.
What kind of attack exploits CVE-2013-5515?
CVE-2013-5515 can be exploited by remote attackers to trigger a device reload, resulting in a denial of service.
Is there a workaround for CVE-2013-5515 if I cannot update immediately?
While there are no official workarounds for CVE-2013-5515, ensuring proper access controls and limiting exposure may help reduce risk.