CVE-2013-1195 in Firewall Services Module
Summary
The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic during denied time periods, aka Bug IDs CSCuf79091 and CSCug45850.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/11/2013
Disclosure
04/24/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8506 | Cisco Firewall Services Module Time-Range Object access control | 264 | Not defined | Official fix | CVE-2013-1195 |