CVE-2013-1138: The NAT process on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a deni...

Security readout for executives and security teams

CVE-2013-1138 is a Cisco ASA denial-of-service issue in the NAT process. Crafted packets can consume connections-table memory, potentially disrupting traffic through affected firewalls. The source bundle does not provide CVSS, affected version detail, or confirmed fixes. Exposure is most likely where Cisco ASA devices are deployed with NAT enabled, especially at network edges handling untrusted traffic. The bundle does not identify exact affected ASA versions or configurations. Treat this as a network availability risk for ASA firewalls. Prioritize confirmation of exposure and vendor-guided remediation, but do not assume active exploitation based on the provided evidence. Mitigation focus: Review Cisco Security Notice CVE-2013-1138 and follow listed fixed releases or workarounds.; Inventory Cisco ASA devices that perform NAT and prioritize externally reachable appliances.; Monitor ASA connection-table memory and NAT-related denial-of-service symptoms..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.