CVE-2013-1195

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-24 · updated 2026-06-16
Weakness: CWE-264

Description

The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic during denied time periods, aka Bug IDs CSCuf79091 and CSCug45850.

Affected products

Cisco ASA Software: all versions
Cisco Firewall Services Module: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1195
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1195

Get alerted when CVE-2013-1195 or the next vulnerability affects your stack