CVE-2012-4663: The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA S...

Security readout for executives and security teams

This flaw can let a remote attacker crash and reload affected Cisco firewall devices using crafted DCERPC traffic. The business impact is availability: a firewall reload can interrupt connectivity and security enforcement. The provided sources do not show active exploitation or a CVSS score. Exposure is most likely where legacy Cisco ASA 5500, ASASM, or FWSM devices run vulnerable software and process DCERPC-inspected traffic. Internet-facing or inter-zone firewall roles raise operational impact. Treat as a high availability risk for legacy Cisco firewall estates. Prioritize upgrades where affected devices protect critical business connectivity or segmentation, but avoid claiming breach risk from the provided evidence alone. Mitigation focus: Upgrade ASA 8.3 to 8.3(2.25) or later.; Upgrade ASA 8.4 to 8.4(2.5) or later.; Upgrade ASA 8.5 to 8.5(1.13) or later..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.