CVE-2013-6682: Cisco Adaptive Security Appliance Software

Medium severity, CVSS 6.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.

Affected products

• Cisco Adaptive Security Appliance Software: up to and including 9.0.3\(6\); version 7.0 only; version 7.0(0) only; version 7.0(1) only; version 7.0(2) only; version 7.0(4) only; …

Published 2013-11-13. Last modified 2026-06-17.