VULNERABILITY INTELLIGENCE

CVE-2012-2474

CVSS score4 MEDIUM
EPSS probability1.38%
CISA KEVNot currently listed
Published2012-08-06
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P

Description

Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by using the clientless WebVPN feature, aka Bug ID CSCth34278.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references