Denial of Service Vulnerability in Cisco Adaptive Security Appliances and Catalyst Series Devices

CVE-2012-4660

Summary

The SIP inspection engine present in Cisco Adaptive Security Appliances (ASA) 5500 series and the ASA Services Module (ASASM) in Catalyst 6500 series devices can be exploited by remote attackers through specially crafted SIP media-update packets. This exploitation can lead to a denial of service, resulting in a device reload. Multiple software versions on these devices prior to certain updates remain vulnerable, highlighting the necessity for timely updates to mitigate such risks.

References