CVE-2012-0335

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-05-02 · updated 2026-06-16
Weakness: CWE-287

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: 7.2, 7.2(1), 7.2(1.22), 7.2(2), 7.2(2.5), 7.2(2.7) (+39)

References

http://secunia.com/advisories/49139
http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html
http://www.securityfocus.com/bid/53558
http://www.securitytracker.com/id?1027008
http://secunia.com/advisories/49139
http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html
http://www.securityfocus.com/bid/53558
http://www.securitytracker.com/id?1027008

Get alerted when CVE-2012-0335 or the next vulnerability affects your stack