CVE-2013-1195
The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic during denied time periods, aka Bug IDs CSCuf79091 and CSCug45850.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - psirt@cisco.com
- Published
- 2013-04-24
- Last modified
- 2024-09-16
- Weaknesses
- CWE-264
Affected products
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1195
