CVE-2013-1150

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-11 · updated 2026-06-16
Weakness: CWE-287

Description

The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5.3), 8.5 and 8.6 before 8.6(1.10), 8.7 before 8.7(1.4), 9.0 before 9.0(1.1), and 9.1 before 9.1(1.2) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCud16590.

Affected products

Cisco Adaptive Security Appliance: all versions
Cisco ASA Software: 7.0, 7.0(0), 7.0(1), 7.0(2), 7.0(4), 7.0(5) (+93)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1150
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1150

Get alerted when CVE-2013-1150 or the next vulnerability affects your stack