Denial of Service in Cisco SSH Implementation on ASA and FWSM Devices
CVE-2013-1193

Currently unrated

Key Information:

Vendor
Cisco
Status
Firewall Services Module
Adaptive Security Appliance Software
Vendor
CVE Published:
16 April 2013

Summary

The Secure Shell (SSH) functionalities within Cisco Adaptive Security Appliances and Firewall Services Module are affected by a vulnerability that fails to adequately terminate sessions. This flaw allows remote attackers to launch Denial of Service (DoS) attacks by repeatedly establishing SSH connections. The inability to properly handle session termination could result in the SSH service becoming unavailable, impacting device functionality and security operations. This issue is documented under multiple bug identifiers, necessitating prompt attention from administrators.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.