CVE-2012-0355: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco...

Security readout for executives and security teams

CVE-2012-0355 is a denial-of-service issue in older Cisco ASA firewall software. A remote attacker could send IPv4 or IPv6 traffic that makes the device reload, disrupting firewall and VPN availability. The sources do not show active exploitation or a CVSS score. Exposure is mainly organizations still operating legacy Cisco ASA 5500 or ASASM deployments on the affected 8.4 or 8.5 software trains, especially internet-facing firewall or VPN edges. Treat this as a legacy perimeter availability risk. Prioritize confirmation and upgrades where affected ASA devices protect internet ingress, VPN access, or critical business networks. Mitigation focus: Inventory Cisco ASA 5500 and ASASM devices and record exact ASA software versions.; Upgrade affected 8.4 deployments to 8.4(2.11) or later, per Cisco guidance.; Upgrade affected 8.5 deployments to 8.5(1.4) or later, per Cisco guidance..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.