Vulnerability Details CVE-2013-1194
The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN groups are specified, which allows remote attackers to enumerate groups via a series of messages, aka Bug ID CSCue73708.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.2%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2013-1194
-
cpe:2.3:h:cisco:adaptive_security_appliance:-
-
cpe:2.3:h:cisco:adaptive_security_appliance:7.0(0)
-
cpe:2.3:h:cisco:adaptive_security_appliance:7.0(2)
-
cpe:2.3:h:cisco:adaptive_security_appliance:7.0(4)
-
cpe:2.3:h:cisco:adaptive_security_appliance:7.1
-
cpe:2.3:h:cisco:adaptive_security_appliance:7.2
-
cpe:2.3:h:cisco:adaptive_security_appliance:8.0
-
cpe:2.3:o:cisco:adaptive_security_appliance_software:-