CVE-2013-5510 | BDVDB-2026-57933 Detail

Description#

The remote-access VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.6.x before 8.6(1.12), 9.0.x before 9.0(3.1), and 9.1.x before 9.1(2.5), when an override-account-disable option is enabled, does not properly parse AAA LDAP responses, which allows remote attackers to bypass authentication via a VPN connection attempt, aka Bug ID CSCug83401.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12013-10-13Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.