CVE-2013-0149: cisco asa_5500_firmware

CVSS: 5.8v2.0MediumModified

Published 03-08-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-0149 is a medium (CVSS 5.8) vulnerability in cisco asa_5500_firmware. EPSS estimates a 2.47% chance of exploitation in the next 30 days, higher than 84.2% of scored vulnerabilities.

Overall risk

24/100

0100

Low · default modelHow is this calculated?

CVSS score

5.8/10

010

Medium · v2.0 (NVD)

EPSS score

2.47%

0%100%

Low · -0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

03-08-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795.

CVSS metrics

1 score · 1 source · 1 version

v2.05.8

EPSS trend

Probability

2.47%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

-0.01 pp

From 2.48% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Cisco6 products

asa_5500_firmware7.0 | 7.1 | 7.2 | 8.0 | 8.1 | 8.2 | 9.0 | 9.1
ios12.0 | 12.0\(1\) | 12.0\(1\)s | 12.0\(1\)st | 12.0\(1\)w | 12.0\(1\)xa3 | 12.0\(1\)xb | 12.0\(1\)xe | 12.0\(2\) | 12.0\(2\)xc | 12.0\(2\)xd | 12.0\(2\)xe | 12.0\(2\)xf | 12.0\(2\)xg | 12.0\(2a\) | 12.0\(2b\) | 12.0\(3\) | 12.0\(3\)t2 | 12.0\(3\)xe | 12.0\(3.2\) | 12.0\(33\)s | 12.0\(3.4\)t | 12.0\(3.6\)w5\(9.0.5\) | 12.0\(3d\) | 12.0\(4\) | 12.0\(4\)s | 12.0\(4\)t | 12.0\(4\)xe | 12.0\(4\)xe1 | 12.0\(4\)xm | 12.0\(4\)xm1 | 12.0\(5\) | 12.0\(5\)s | 12.0\(5\)t | 12.0\(5\)t1 | 12.0\(5\)t2 | 12.0\(5\)wc | 12.0\(5\)wc2 | 12.0\(5\)wc2b | 12.0\(5\)wc3 | 12.0\(5\)wc3b | 12.0\(5\)wc5a | 12.0\(05\)wc8 | 12.0\(5\)wc9 | 12.0\(5\)wc9a | 12.0\(5\)wc11 | 12.0\(5\)wc13 | 12.0\(5\)wx | 12.0\(5\)xe | 12.0\(5\)xk | 12.0\(5\)xk2 | 12.0\(5\)xn | 12.0\(5\)xn1 | 12.0\(5\)xs | 12.0\(5\)xu | 12.0\(5\)yb4 | 12.0\(5.1\)xp | 12.0\(5.2\)xu | 12.0\(5.3\)wc1 | 12.0\(5.4\)wc1 | 12.0\(5a\)e | 12.0\(6\) | 12.0\(6b\) | 12.0\(7\)db2 | 12.0\(7\)dc1 | 12.0\(7\)s1 | 12.0\(7\)sc | 12.0\(7\)t | 12.0\(7\)t2 | 12.0\(7\)t3 | 12.0\(7\)wx5\(15a\) | 12.0\(7\)xe | 12.0\(7\)xe2 | 12.0\(7\)xf | 12.0\(7\)xf1 | 12.0\(7\)xk | 12.0\(7\)xk2 | 12.0\(7\)xk3 | 12.0\(7\)xv | 12.0\(7.4\)s | 12.0\(7a\) | 12.0\(8\) | 12.0\(8\)s1 | 12.0\(8.0.2\)s | 12.0\(8.3\)sc | 12.0\(8a\) | 12.0\(9\) | 12.0\(9\)s | 12.0\(9\)s8 | 12.0\(9a\) | 12.0\(10\) | 12.0\(10\)s3b | 12.0\(10\)s7 | 12.0\(10\)s8 | 12.0\(10\)w5 | 12.0\(10\)w5\(18f\) | 12.0\(10\)w5\(18g\) | 12.0\(10a\) | 12.0\(11\)s6 | 12.0\(11\)st4 | 12.0\(11a\) | 12.0\(12\) | 12.0\(12\)s3 | 12.0\(12\)s4 | 12.0\(12a\) | 12.0\(13\)s6 | 12.0\(13\)s8 | 12.0\(13\)w5\(19c\) | 12.0\(13\)wt6\(1\) | 12.0\(13a\) | 12.0\(14\) | 12.0\(14\)s7 | 12.0\(14\)s8 | 12.0\(14\)st | 12.0\(14\)st3 | 12.0\(14\)w5\(20\) | 12.0\(14a\) | 12.0\(15\)s | 12.0\(15\)s3 | 12.0\(15\)s6 | 12.0\(15\)s7 | 12.0\(15\)sc | 12.0\(15\)sl | 12.0\(15a\) | 12.0\(16\)s | 12.0\(16\)s8 | 12.0\(16\)s8a | 12.0\(16\)s10 | 12.0\(16\)sc | 12.0\(16\)sc3 | 12.0\(16\)st | 12.0\(16\)st1 | 12.0\(16\)w5\(21\) | 12.0\(16.06\)s | 12.0\(16a\) | 12.0\(17\) | 12.0\(17\)s | 12.0\(17\)s4 | 12.0\(17\)s7 | 12.0\(17\)sl | 12.0\(17\)sl2 | 12.0\(17\)sl6 | 12.0\(17\)sl9 | 12.0\(17\)st1 | 12.0\(17\)st5 | 12.0\(17\)st8 | 12.0\(17a\) | 12.0\(18\)s | 12.0\(18\)s5 | 12.0\(18\)s5a | 12.0\(18\)s7 | 12.0\(18\)sl | 12.0\(18\)st1 | 12.0\(18\)w5\(22b\) | 12.0\(18b\) | 12.0\(19\) | 12.0\(19\)s | 12.0\(19\)s2 | 12.0\(19\)s2a | 12.0\(19\)s4 | 12.0\(19\)sl | 12.0\(19\)sl4 | 12.0\(19\)sp | 12.0\(19\)st | 12.0\(19\)st2 | 12.0\(19\)st6 | 12.0\(19a\) | 12.0\(20\)sl | 12.0\(20\)sp | 12.0\(20\)sp1 | 12.0\(20\)st2 | 12.0\(20\)st6 | 12.0\(20\)st7 | 12.0\(20\)sx | 12.0\(20\)w5\(22b\) | 12.0\(20.4\)sp | 12.0\(20a\) | 12.0\(21\)s | 12.0\(21\)s1 | 12.0\(21\)s3 | 12.0\(21\)s4a | 12.0\(21\)s5a | 12.0\(21\)s6 | 12.0\(21\)s7 | 12.0\(21\)sl | 12.0\(21\)st | 12.0\(21\)st6 | 12.0\(21\)st7 | 12.0\(21\)sx | 12.0\(21a\) | 12.0\(22\)s | 12.0\(22\)s4 | 12.0\(22\)s5 | 12.0\(22\)sy | 12.0\(23\)s2 | 12.0\(23\)s3 | 12.0\(23\)s4 | 12.0\(23\)s5 | 12.0\(23\)s6 | 12.0\(23\)sx | 12.0\(23\)sz | 12.0\(24\)s1 | 12.0\(24\)s2 | 12.0\(24\)s4 | 12.0\(24\)s5 | 12.0\(24\)s6 | 12.0\(24.2\)s | 12.0\(25\)s1 | 12.0\(25\)w5\(27\) | 12.0\(25\)w5\(27c\) | 12.0\(25\)w5-27d | 12.0\(25.4\)s1 | 12.0\(26\) | 12.0\(26\)s | 12.0\(26\)s1 | 12.0\(26\)s2 | 12.0\(26\)s6 | 12.0\(26\)w5\(28\) | 12.0\(26\)w5\(28a\) | 12.0\(27\) | 12.0\(27\)s | 12.0\(27\)s1 | 12.0\(27\)sv | 12.0\(27\)sv1 | 12.0\(27\)sv2 | 12.0\(28\) | 12.0\(28\)s3 | 12.0\(28\)s5 | 12.0\(28\)w5\(31a\) | 12.0\(28\)w5-30b | 12.0\(28\)w5-32a | 12.0\(28c\) | 12.0\(28d\) | 12.0\(30\)s1 | 12.0\(30\)s2 | 12.0\(30\)s4 | 12.0\(31\)s | 12.0\(31\)s1 | 12.0\(32\)s12 | 12.0\(32\)s13 | 12.0\(32\)sy8 | 12.0\(32\)sy9 | 12.0\(33\)s3 | 12.0\(33\)s4 | 12.0da | 12.0db | 12.0dc | 12.0ev | 12.0s | 12.0sc | 12.0sl | 12.0sp | 12.0st | 12.0sv | 12.0sx | 12.0sy | 12.0sz | 12.0t | 12.0w | 12.0w5 | 12.0wc | 12.0wt | 12.0wx | 12.0xa | 12.0xb | 12.0xc | 12.0xd | 12.0xe | 12.0xf | 12.0xg | 12.0xh | 12.0xi | 12.0xj | 12.0xk | 12.0xl | 12.0xm | 12.0xn | 12.0xp | 12.0xq | 12.0xr | 12.0xs | 12.0xt | 12.0xu | 12.0xv | 12.0xw | 12.1 | 12.1\(1\) | 12.1\(1\)db | 12.1\(1\)db2 | 12.1\(1\)dc | 12.1\(1\)dc2 | 12.1\(1\)e5 | 12.1\(1\)ex | 12.1\(1\)t | 12.1\(1.3\)t | 12.1\(1a\)t1 | 12.1\(1c\) | 12.1\(2\)e1 | 12.1\(2\)t | 12.1\(2\)xf | 12.1\(2\)xf4 | 12.1\(2\)xf5 | 12.1\(6\)ea2c | 12.1\(6\)ey | 12.1\(6\)ez1 | 12.1\(6\)ez2 | 12.1\(6.5\) | 12.1\(6.5\)ec3 | 12.1\(6a\) | 12.1\(7\) | 12.1\(7\)cx | 12.1\(7\)da2 | 12.1\(7\)da3 | 12.1\(7\)ec | 12.1\(7a\)e6 | 12.1\(7a\)ey | 12.1\(7a\)ey3 | 12.1\(7b\) | 12.1\(8\) | 12.1\(8\)aa1 | 12.1\(8\)e | 12.1\(8\)ea | 12.1\(8\)ea1b | 12.1\(8\)ea2b | 12.1\(8a\)e | 12.1\(8a\)ew | 12.1\(8a\)ew1 | 12.1\(8a\)ex | 12.1\(8b\)e8 | 12.1\(8b\)e9 | 12.1\(8b\)e14 | 12.1\(8b\)e15 | 12.1\(8b\)e16 | 12.1\(8b\)e18 | 12.1\(8b\)e20 | 12.1\(8b\)ex4 | 12.1\(8c\) | 12.1\(9\) | 12.1\(9\)aa | 12.1\(9\)e | 12.1\(9\)e3 | 12.1\(9\)ea | 12.1\(9\)ex | 12.1\(9\)ex3 | 12.1\(9a\) | 12.1\(10\) | 12.1\(10\)aa | 12.1\(10\)e | 12.1\(10\)e4 | 12.1\(10\)ec | 12.1\(10\)ec1 | 12.1\(10\)ex | 12.1\(10\)ey | 12.1\(10.5\)ec | 12.1\(10a\) | 12.1\(11\) | 12.1\(11\)e | 12.1\(11\)ea1 | 12.1\(11\)ec | 12.1\(11.5\)e | 12.1\(11a\) | 12.1\(11b\) | 12.1\(11b\)e | 12.1\(11b\)e12 | 12.1\(11b\)e14 | 12.1\(12\) | 12.1\(12\)e | 12.1\(12a\) | 12.1\(12b\) | 12.1\(12c\) | 12.1\(12c\)e7 | 12.1\(12c\)ec | 12.1\(12c\)ev01 | 12.1\(12c\)ew4 | 12.1\(13\) | 12.1\(13\)ay | 12.1\(13\)e1 | 12.1\(13\)e3 | 12.1\(13\)e7 | 12.1\(13\)e9 | 12.1\(13\)e12 | 12.1\(13\)e13 | 12.1\(13\)e17 | 12.1\(13\)ea1 | 12.1\(13\)ea1c | 12.1\(13\)ew | 12.1\(13\)ew4 | 12.1\(13\)ex2 | 12.1\(13.4\)e | 12.1\(14\) | 12.1\(14\)e1 | 12.1\(14\)e4 | 12.1\(14\)e9 | 12.1\(14\)e10 | 12.1\(14\)ea1 | 12.1\(14\)eb | 12.1\(14.5\) | 12.1\(15\)bc1 | 12.1\(16\) | 12.1\(18\) | 12.1\(18.4\) | 12.1\(19\) | 12.1\(19\)e | 12.1\(19\)e1 | 12.1\(19\)e6 | 12.1\(19\)ec | 12.1\(19\)ew | 12.1\(19\)ew3 | 12.1\(19\)fc1 | 12.1\(19.3\)e | 12.1\(20\) | 12.1\(20\)e | 12.1\(20\)e1 | 12.1\(20\)e2 | 12.1\(20\)e3 | 12.1\(20\)e5 | 12.1\(20\)ea1 | 12.1\(20\)ea1a | 12.1\(20\)ec | 12.1\(20\)ec1 | 12.1\(20\)ec2 | 12.1\(20\)eo | 12.1\(20\)eo1 | 12.1\(20\)eo3 | 12.1\(20\)ew | 12.1\(20\)ew1 | 12.1\(20\)ew2 | 12.1\(20\)ew4 | 12.1aa | 12.1ax | 12.1ay | 12.1az | 12.1cx | 12.1da | 12.1db | 12.1dc | 12.1e | 12.1ea | 12.1eb | 12.1ec | 12.1eo | 12.1eu | 12.1ev | 12.1ew | 12.1ex | 12.1ey | 12.1ez | 12.1ga | 12.1gb | 12.1m | 12.1s | 12.1sec | 12.1t | 12.1x\(l\) | 12.1xa | 12.1xb | 12.1xc | 12.1xd | 12.1xe | 12.1xf | 12.1xg | 12.1xh | 12.1xi | 12.1xj | 12.1xk | 12.1xm | 12.1xp | 12.1xq | 12.1xr | 12.1xs | 12.1xt | 12.1xu | 12.1xv | 12.1xw | 12.1xx | 12.1xy | 12.1xz | 12.1ya | 12.1yb | 12.1yc | 12.1yd | 12.1ye | 12.1yf | 12.1yh | 12.1yi | 12.1yj
ios_xe2.1.0 | 2.1.1 | 2.1.2 | 2.2.1 | 2.2.2 | 2.2.3 | 2.3.0 | 2.3.1 | 2.3.1t | 2.3.2 | 2.4.0 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.5.0 | 2.5.1 | 2.5.2 | 2.6.0 | 2.6.1 | 2.6.2 | 3.1.0s | 3.1.0sg | 3.1.1s | 3.1.1sg | 3.12s | 3.13s | 3.14s | 3.2.00.xo.15.0\(2\)xo | 3.2.0s | 3.2.0sg | 3.2.0xo | 3.2.1s | 3.2.1sg | 3.2.2s | 3.2.2sg | 3.2.3sg | 3.2.4sg | 3.3.0s | 3.3.0sg | 3.3.1s | 3.3.1sg | 3.3.2s | 3.3.3s | 3.4.0as | 3.4.0s | 3.4.1s | 3.4.2s | 3.4.3s | 3.4.4s | 3.4.5s | 3.4.xs | 3.5.0s | 3.5.1s | 3.5.2s | 3.5.xs | 3.6.0s | 3.6.1s | 3.6.2s | 3.7.0s | 3.7.1s | 3.9.0s
nx-osna
pix_firewall_software7.0 | 7.1 | 7.2 | 8.0\(2\) | 9.0 | 9.1

Show all 6

1 vendor · 6 products

References

2 links

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospfVendor AdvisoryX Refsource CISCO
www.kb.cert.org/vuls/id/229804Third Party AdvisoryX Refsource CERT VNUS Government Resource

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities