CVE-2013-1199

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-18 · updated 2026-06-16
Weakness: CWE-362

Description

Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a denial of service (device reload) by accessing resources within multiple sessions, aka Bug ID CSCub58996.

Affected products

Cisco Adaptive Security Appliance: all versions
Cisco Adaptive Security Appliance Clientless Ssl Vpn: all versions
Cisco ASA Software: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1199
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1199

Get alerted when CVE-2013-1199 or the next vulnerability affects your stack