CVE-2013-5542: Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0 before 9.0(3...

Security readout for executives and security teams

CVE-2013-5542 is an old Cisco ASA denial-of-service vulnerability. A remote attacker could send crafted ICMP packets that disrupt firewall sessions or force the device to reload. Business impact is availability loss at a security control, not data theft based on the provided sources. Exposure is likely limited to organizations still running the listed legacy Cisco ASA releases. Risk is higher where ASA interfaces can receive ICMP from untrusted networks. The source bundle does not provide CPEs, deployment prerequisites, or CVSS data. Schedule remediation for any remaining affected ASA systems, especially perimeter firewalls. The main concern is outage or traffic disruption at a network security control. Urgency is lower than confirmed exploited vulnerabilities but should not be ignored on exposed devices. Mitigation focus: Upgrade affected Cisco ASA versions to the fixed releases or later listed by Cisco.; Review the Cisco advisory for supported upgrade paths and any platform-specific guidance.; Prioritize internet-facing or externally reachable ASA interfaces first..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.