CVE-2012-2472

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-08-06 · updated 2026-06-16
Weakness: CWE-399

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: 8.2, 8.2(1), 8.2(2), 8.2(3), 8.2(3.9), 8.2(4) (+12)

References

http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html
http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html

Get alerted when CVE-2012-2472 or the next vulnerability affects your stack