CVE-2013-1152: Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers t...

Security readout for executives and security teams

This issue could let a remote attacker crash and reload certain Cisco ASA firewall appliances by sending a specially formed DNS message. For an organization, the main risk is loss of firewall availability, which can interrupt VPN, perimeter filtering, and network connectivity depending on deployment. Exposure is likely limited to organizations still running Cisco ASA software 9.0 builds earlier than 9.0(1.2). Internet-facing or perimeter ASA deployments would have higher business impact if a reload interrupts traffic handling or VPN service. Treat this as an availability risk for legacy Cisco ASA environments. It is not supported by active-exploitation evidence in the provided sources, but affected perimeter firewalls can create outsized outage impact. Prioritize confirmation and upgrade planning over emergency response unless affected devices are critical or unstable. Mitigation focus: Identify Cisco ASA appliances running software 9.0 before 9.0(1.2).; Follow Cisco advisory guidance for fixed or recommended ASA software releases.; Prioritize perimeter, VPN, and high-availability firewall deployments..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.