CVE-2013-6682
N/A
Published: November 13, 2013 at 03:00 PM UTC
Updated: June 17, 2026 at 12:00 AM UTC
1 product affected across 1 vendorAdaptive Security Appliance
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.7%
Description
The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 9.0.3(6)7.07.0(0)7.0(1)7.0(2)7.0(4)7.0(5)7.0(5.2)7.0(6)7.0(6.7)7.0(7)7.0(8)7.0.17.0.1.47.0.27.0.47.0.4.37.0.57.0.67.0.77.0.87.0.8 interim7.17.1(2)7.1(2.27)7.1(2.48)7.1(2.49)7.1(2.5)7.1(5)7.1.17.1.27.27.2(1)7.2(1.22)7.2(2)7.2(2.10)7.2(2.14)7.2(2.15)7.2(2.16)7.2(2.17)7.2(2.18)7.2(2.19)7.2(2.48)7.2(2.5)7.2(2.7)7.2(2.8)7.2(3)7.2(4)7.2(5)7.2.17.2.27.2.37.2.47.2.58.08.0(2)8.0(3)8.0(4)8.0(5)8.0(5.28)8.0(5.31)8.0.28.0.38.0.48.0.58.18.28.2(1)8.2(2)8.2(3)8.2(3.9)8.2(4)8.2(4.1)8.2(4.4)8.2(5)8.2(5.35)8.2(5.38)8.2.18.2.28.2.2 interim8.2.38.3(1)8.3(2)8.3(2.34)8.3(2.37)8.3.18.3.1 interim8.3.28.48.4(1)8.4(1.11)8.4(2)8.4(2.11)8.4(3)8.4(4.11)8.4(5)8.4(6)8.58.5(1)8.5(1.17)8.5(1.4)8.68.6(1)8.6(1.10)8.6(1.3)8.78.7(1.1)8.7(1.3)8.7.18.7.1.19.09.0(1)9.0(2)9.0(3)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (2)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6682x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://tools.cisco.com/security/center/viewAlert.x?alertId=31692Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card