CVE-2019-12693

Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability

MEDIUM

4.9

CVSS Score

Published: October 2, 2019 at 07:06 PM UTC

Updated: June 17, 2026 at 02:15 AM UTC

11 products affected across 1 vendorAdaptive Security ApplianceASA 5580ASA 5505

Using Cisco Adaptive Security Appliance (ASA) Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Adaptive Security Appliance (ASA) Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.9

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to the use of an incorrect data type for a length variable. An attacker could exploit this vulnerability by initiating the transfer of a large file to an affected device via SCP. To exploit this vulnerability, the attacker would need to have valid privilege level 15 credentials on the affected device. A successful exploit could allow the attacker to cause the length variable to roll over, which could cause the affected device to crash.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Adaptive Security Appliance · Cisco

95%

v < 9.6.4.309.10 ≤ v < 9.10.1.229.12 ≤ v < 9.12.2.19.7 ≤ v < 9.8.49.9 ≤ v < 9.9.2.50

Affected range stops below 9.10.1.22, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.12.2.1, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.6.4.30, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.8.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.9.2.50, so it looks safe — our inference, not a vendor statement

cisco-asa-5505 (environment) · cisco-asa-5510 (environment) · cisco-asa-5512-x (environment) · cisco-asa-5515-x (environment) · cisco-asa-5520 (environment) · cisco-asa-5525-x (environment) · cisco-asa-5550 (environment) · cisco-asa-5555-x (environment) · cisco-asa-5580 (environment) · cisco-asa-5585-x (environment)

ASA 5505 · Ciscodevice

80%

All versions

ASA 5510 · Ciscodevice

80%

All versions

Asa 5512-X · Ciscodevice

80%

All versions

Asa 5515-X · Ciscodevice

80%

All versions