CVE-2012-0378

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-05-03 · updated 2026-06-16
Weakness: CWE-189

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection count, aka Bug ID CSCtv19854.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: 8.0, 8.0(2), 8.0(3), 8.0(4), 8.0(5), 8.0.2 (+26)

References

http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html
http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html

Get alerted when CVE-2012-0378 or the next vulnerability affects your stack