VULNERABILITY INTELLIGENCE

CVE-2012-5415

CVSS score5.4 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2013-04-16
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:C

Description

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references