CVE-2013-1149: Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28),...

Security readout for executives and security teams

This vulnerability can let a remote attacker crash and reload affected Cisco firewall or VPN devices by sending a crafted IKEv1 message. The business impact is availability: perimeter firewalls or VPN gateways may briefly fail, disrupting connectivity. The source bundle does not show confirmed active exploitation. Exposure is most likely where legacy Cisco ASA or FWSM devices run the listed vulnerable software and IKEv1 is reachable by remote parties. Organizations without ASA/FWSM, or already on Cisco’s fixed versions, are not indicated as affected by the provided sources. Prioritize remediation for internet-facing ASA or FWSM devices supporting VPN or firewall services. A successful attack causes outage rather than data theft based on available sources, but perimeter device reloads can still disrupt business operations and incident response. Mitigation focus: Upgrade Cisco ASA to the fixed release or later listed by Cisco.; Upgrade Cisco FWSM to the fixed release or later listed by Cisco.; If patching is delayed, check Cisco’s advisory for supported interim guidance..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.