CVE-2012-5415

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-16 · updated 2026-06-16
Weakness: CWE-362

Description

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.

Affected products

Cisco 5500 Adaptive Security Appliance: 7.2-2
Cisco 5500 Series Adaptive Security Appliance: 7.2
Cisco Adaptive Security Appliance: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5415
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5415

Get alerted when CVE-2012-5415 or the next vulnerability affects your stack