Servers and applications
CVE-2013-5507
The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service (device reload) via a (1) ICMP or (2) ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975.
- Severity
- High 7.1
- Published
- 13 Oct 2013
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 1.7% in the next 30 daysHigher than 77% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-310
- Attack
- Over the network · No login needed
- Attacker can
- Take it down
- CVSS vector
AV:N/AC:M/Au:N/C:N/I:N/A:C- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software |
|