CVEvulnerability

CVE-2013-1155

7.8 HIGH Published 2013-04-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-04-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-287

Description

The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624.

Affected configurations

• cisco firewall services module software 3.1 • cisco firewall services module software 3.2 • cisco firewall services module software 3.2\(1\) • cisco firewall services module software 3.2\(2\) • cisco firewall services module software 3.2\(3\) • cisco firewall services module software 3.2\(4\) • cisco firewall services module software 3.2\(5\) • cisco firewall services module software 3.2\(6\) • cisco firewall services module software 3.2\(7\) • cisco firewall services module software 3.2\(8\) • cisco firewall services module software 3.2\(9\) • cisco firewall services module software 3.2\(10\) • cisco firewall services module software 3.2\(11\) • cisco firewall services module software 3.2\(12\) • cisco firewall services module software 3.2\(13\) • cisco firewall services module software 3.2\(14\) • cisco firewall services module software 3.2\(15\) • cisco firewall services module software 3.2\(16\) • cisco firewall services module software 3.2\(17\) • cisco firewall services module software 3.2\(18\) • cisco firewall services module software 3.2\(19\) • cisco firewall services module software 3.2\(20\) • cisco firewall services module software 4.0 • cisco firewall services module software 4.0\(1\) • cisco firewall services module software 4.0\(2\) • cisco firewall services module software 4.0\(3\) • cisco firewall services module software 4.0\(4\) • cisco firewall services module software 4.0\(5\) • cisco firewall services module software 4.0\(6\) • cisco firewall services module software 4.0\(7\) • cisco firewall services module software 4.0\(8\) • cisco firewall services module software 4.0\(10\) • cisco firewall services module software 4.0\(11\) • cisco firewall services module software 4.0\(12\) • cisco firewall services module software 4.0\(13\) • cisco firewall services module software 4.0\(14\) • cisco firewall services module software 4.0\(15\) • cisco firewall services module software 4.1 • cisco firewall services module software 4.1\(1\) • cisco firewall services module software 4.1\(2\) • cisco firewall services module software 4.1\(3\) • cisco firewall services module software 4.1\(4\) • cisco firewall services module software 4.1\(5\)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References