What’s Vulnerable › Vulnerabilities

CVE-2013-5512

• Severity: high (CVSS 7.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-10-13 · updated 2026-06-16
• Weakness: CWE-362

Description

Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.5), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.4), 9.0.x before 9.0(1.4), and 9.1.x before 9.1(1.2), in certain conditions involving the spoof-server option or ActiveX or Java response inspection, allows remote attackers to cause a denial of service (device reload) via a crafted HTTP response, aka Bug ID CSCud37992.

Affected products

• Cisco ASA Software: 8.2, 8.2(1), 8.2(2), 8.2(3), 8.2(3.9), 8.2(4) (+27)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5512
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5512

Get alerted when CVE-2013-5512 or the next vulnerability affects your stack