VULNERABILITY INTELLIGENCE
CVE-2012-4660
CVSS score7.8 HIGH
EPSS probability1.80%
CISA KEVNot currently listed
Published2012-10-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17), 8.3 before 8.3(2.28), 8.4 before 8.4(2.13), 8.5 before 8.5(1.4), and 8.6 before 8.6(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted SIP media-update packet, aka Bug ID CSCtr63728.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer