NVD

Id
40797  
Name
CVE-2013-5511  
Description
The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.7), 9.0.x before 9.0(3.1), and 9.1.x before 9.1(2.6) does not properly implement the authentication-certificate option, which allows remote attackers to bypass authentication via a TCP session to an ASDM interface, aka Bug ID CSCuh44815.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-13  
Modified Date
2016-11-01  
Seq
2013-5511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206297 40797 CVE-2013-5511 20131009 Multiple Vulnerabilities in Cisco ASA Software  View
206298 40797 CVE-2013-5511 20131213 Digital Certificate HTTP Authentication Bypass Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23071 JVNDB-2013-004646 Cisco ASA ソフトウェアの ASDM のリモート管理機能における認証を回避される脆弱性 Cisco Adaptive Security Appliances (ASA) ソフトウェアの Adaptive Security Device Management (ASDM) のリモート管理機能は、authentication-certificate オプションを適切に実装していないため、認証を回避される脆弱性が存在します。 CVE-2013-5511 65453 CVE-2013-5511 40797 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004646.html 2013-10-09 2014-01-10 View