CVE-2013-1155: cisco firewall_services_module_software Improper Authentication
CVSS: 7.8v2.0HighModified
Published 11-04-2013Last modified 16-09-2024
Vulnerability summary
CVE-2013-1155 is a high (CVSS 7.8) Improper Authentication vulnerability in cisco firewall_services_module_software. EPSS estimates a 1.26% chance of exploitation in the next 30 days, higher than 69.1% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v2.0 (NVD)EPSS score
1.26%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 11-04-2013PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.8Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
1.26%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
0.00 pp
From 1.26% on 19-09-2026
19-09-202619-10-2026
EPSS score1.26%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- firewall_services_module_software3.1 | 3.2 | 3.2\(1\) | 3.2\(2\) | 3.2\(3\) | 3.2\(4\) | 3.2\(5\) | 3.2\(6\) | 3.2\(7\) | 3.2\(8\) | 3.2\(9\) | 3.2\(10\) | 3.2\(11\) | 3.2\(12\) | 3.2\(13\) | 3.2\(14\) | 3.2\(15\) | 3.2\(16\) | 3.2\(17\) | 3.2\(18\) | 3.2\(19\) | 3.2\(20\) | 4.0 | 4.0\(1\) | 4.0\(2\) | 4.0\(3\) | 4.0\(4\) | 4.0\(5\) | 4.0\(6\) | 4.0\(7\) | 4.0\(8\) | 4.0\(10\) | 4.0\(11\) | 4.0\(12\) | 4.0\(13\) | 4.0\(14\) | 4.0\(15\) | 4.1 | 4.1\(1\) | 4.1\(2\) | 4.1\(3\) | 4.1\(4\) | 4.1\(5\)
1 vendor · 1 product
References
1 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-fwsmVendor AdvisoryX Refsource CISCO