CVE-2013-1195: The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewal...

Security readout for executives and security teams

This flaw can make scheduled firewall rules on Cisco ASA and FWSM fail open. Traffic that should be blocked during denied time windows may pass, weakening business controls that depend on time-based access restrictions. Exposure is most likely where Cisco ASA or FWSM devices use time-based ACLs with periodic time-range statements. The provided sources do not identify affected versions, configurations beyond that feature, or internet exposure requirements. Treat as priority where scheduled firewall restrictions protect sensitive systems, partner access, or after-hours controls. If the environment does not use Cisco ASA/FWSM time-based ACLs, urgency is lower but inventory confirmation is still needed. Mitigation focus: Review Cisco Security Notice CVE-2013-1195 for affected releases and remediation guidance.; Inventory ASA and FWSM devices using time-range ACLs with periodic statements.; Replace high-risk time-based restrictions with static or upstream controls until vendor guidance is applied..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.