Input Validation Vulnerability in Cisco Adaptive Security Appliances

CVE-2012-6395

Summary

Cisco Adaptive Security Appliances (ASA) with firmware version 8.4 are susceptible to a vulnerability that arises from inadequate validation of input related to UNC share pathnames. This flaw can be exploited by remote authenticated users, enabling them to compromise the device's functionality and potentially trigger a denial of service, which results in a device crash. Administrators should ensure their firmware is updated to the latest version to mitigate the risk associated with this vulnerability.

References