CVE-2013-1149: Cisco 5500 Series Adaptive Security Appliance

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3), and Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(24.1) and 4.0 and 4.1 before 4.1(11.1), allow remote attackers to cause a denial of service (device reload) via a crafted IKEv1 message, aka Bug IDs CSCub85692 and CSCud20267.

Affected products

• Cisco 5500 Series Adaptive Security Appliance
• Cisco 6500 Series Adaptive Security Appliance
• Cisco 7600 Series Adaptive Security Appliance
• Cisco Adaptive Security Appliance Software: version 7.0 only; version 7.0(0) only; version 7.0(1) only; version 7.0(2) only; version 7.0(4) only; version 7.0(5) only; …
• Cisco Firewall Services Module Software: version 3.1 only; version 3.2 only; version 3.2(1) only; version 3.2(2) only; version 3.2(3) only; version 3.2(4) only; …

Published 2013-04-11. Last modified 2026-06-16.