CVE-2013-5557

MediumCVSS 6.3/10Last modified Jun 16, 2026

Description

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to cause a denial of service (device crash or error-recovery event) via an HTTP request that triggers a rewrite, aka Bug ID CSCug91577.

Metrics

CVSS 2.0 6.3/10AV:N/AC:M/Au:S/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557Broken Link, Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37383Vendor Advisory
http://www.securityfocus.com/bid/72529Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100694Third Party Advisory, VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557Broken Link, Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37383Vendor Advisory
http://www.securityfocus.com/bid/72529Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100694Third Party Advisory, VDB Entry

Timeline

Published: Feb 7, 2015
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-555810.0The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, CVE-2013-55596.8Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allow CVE-2013-55605.4The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not prop CVE-2013-55615.0The Safe Search enforcement feature in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security Software does not properly perform CVE-2013-55625.0The ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (temp CVE-2013-55634.3Cross-site scripting (XSS) vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring, Analysis and Response System (CS-MARS) al CVE-2013-55645.0The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a deni CVE-2013-55654.3The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 CVE-2013-55665.0Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service (supervisor CPU consumption) via Authen CVE-2013-55675.4Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for CVE-2013-55687.1The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a de CVE-2013-55697.5SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec