VULNERABILITY INTELLIGENCE

CVE-2013-1199

CVSS score4.9 MEDIUM
EPSS probability0.90%
CISA KEVNot currently listed
Published2013-04-18
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:N/I:N/A:C

Description

Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a denial of service (device reload) by accessing resources within multiple sessions, aka Bug ID CSCub58996.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references