CVE-2013-5551: Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access...

Security readout for executives and security teams

CVE-2013-5551 is a Cisco ASA availability flaw. A logged-in Clientless SSL VPN user could cause an ASA stack overflow and device reload when specific same-security-traffic and management-access options are enabled. The provided sources describe denial of service, not data theft or remote unauthenticated takeover. Exposure is likely limited to organizations running Cisco ASA with Clientless SSL VPN enabled, internal-resource browsing available, and the named traffic and management-access options enabled. The supplied source bundle does not identify exact affected versions or CPEs. Treat as a targeted availability risk for VPN and firewall services. It is not evidenced as actively exploited in the supplied sources, but a reload of an ASA can disrupt remote access and protected network connectivity. Mitigation focus: Review Cisco Security Notice CVE-2013-5551 for affected releases and fixed software.; Prioritize ASA devices providing Clientless SSL VPN access to internal resources.; Limit portal access to trusted users and required groups only..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.