CVE-2012-0354: The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA S...

Security readout for executives and security teams

This flaw can make certain Cisco ASA firewall platforms reload when crafted IPv4 or IPv6 traffic triggers a Threat Detection shun event. A reload means the security device briefly stops protecting or passing traffic, creating an outage risk at the network edge. Exposure is most likely in legacy Cisco ASA 5500 or ASASM deployments still running ASA 8.0 through vulnerable 8.6 release trains with Threat Detection shun behavior in use. Treat this as a high availability risk for legacy perimeter firewalls. It warrants prompt inventory and upgrade planning, especially where affected devices protect critical internet ingress, VPN, or data-center traffic. Mitigation focus: Upgrade affected ASA software to the fixed Cisco versions or later supported releases.; Prioritize internet-facing or perimeter ASA and ASASM devices.; Review Cisco advisory guidance before changing Threat Detection or shun-related configuration..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.