Unscored severity · published Aug 6, 2012
CVE-2012-2472
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes,…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
5S
5500 Series Adaptive Security Appliance · Cisco
All versions, or not specified · source: NVD
AS
Adaptive Security Appliance Software · Cisco
8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +12 more · source: NVD
Affected product
5S
5500 Series Adaptive Security Appliance
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2472
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2472
Vendor Advisory
http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html
More from 5500 Series Adaptive Security Appliance
–
CVE-2013-1215
The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID…
–
CVE-2012-5415
Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple…
–
CVE-2013-1149
Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before…
–
CVE-2012-4663
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with…
–
CVE-2012-4662
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with…