CVE-2013-5512: Cisco Adaptive Security Appliance Software

High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.5), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.4), 9.0.x before 9.0(1.4), and 9.1.x before 9.1(1.2), in certain conditions involving the spoof-server option or ActiveX or Java response inspection, allows remote attackers to cause a denial of service (device reload) via a crafted HTTP response, aka Bug ID CSCud37992.

Affected products

• Cisco Adaptive Security Appliance Software: version 8.2 only; version 8.2(1) only; version 8.2(2) only; version 8.2(3) only; version 8.2(3.9) only; version 8.2(4) only; …

Published 2013-10-13. Last modified 2026-06-16.