CVE-2012-2472: Cisco 5500 Series Adaptive Security Appliance

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.

Affected products

• Cisco 5500 Series Adaptive Security Appliance
• Cisco Adaptive Security Appliance Software: version 8.2 only; version 8.2(1) only; version 8.2(2) only; version 8.2(3) only; version 8.2(3.9) only; version 8.2(4) only; …

Published 2012-08-06. Last modified 2026-06-16.