CVE-2013-3382: The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9...

Security readout for executives and security teams

This Cisco ASA NGFW module flaw can let a remote attacker disrupt firewall service using fragmented IPv4 or IPv6 traffic. The reported impact is device reload or traffic-processing outage, which can interrupt protected network connectivity. The provided sources do not include CVSS details or confirmed exploitation. Exposure is most likely on Cisco ASA deployments running the NGFW/CX module in the affected 9.x version ranges, especially where untrusted fragmented IPv4 or IPv6 traffic can reach the device. Treat this as a perimeter availability risk. It is not described as compromise of data, but firewall reloads or traffic outages can affect business operations and should be remediated during normal network maintenance unless critical exposure exists. Mitigation focus: Inventory Cisco ASA devices running the NGFW or CX module.; Upgrade affected 9.x branches to Cisco’s fixed versions or later.; Prioritize internet-facing or critical perimeter ASA deployments..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.