VULNERABILITY INTELLIGENCE
CVE-2016-1312
CVSS score7.5 HIGH
EPSS probability2.87%
CISA KEVNot currently listed
Published2016-03-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
The HTTPS inspection engine in the Content Security and Control Security Services Module (CSC-SSM) 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service (memory consumption or device reload) via a flood of HTTPS packets, aka Bug ID CSCue76147.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer