Summary

• Cisco ASA Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. Updates are available.

Analysis

• To exploit the vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link.
  
  Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.

Vendor Announcements

• Cisco has released a security notice at the following link: CVE-2013-3414
  
  Customers should refer to Cisco bug ID CSCug83080 for the most complete list of affected product versions.

Fixed Software

Revision History

• Initial ReleaseShow Less

Affected Products

• The security vulnerability applies to the following combinations of products.
  
  

  Primary Products
  Cisco	Cisco Adaptive Security Appliance (ASA) Software	7.0 (Base, .1.4, .1, .2, .3, .4, .4.2, .5, .5.12, .6, .6.4, .6.8, .6.18, .6.22, .6.26, .6.29, .6.32, .7, .7.1, .7.4, .7.9, .7.12, .8, .8.2, .8.8, .8.12, .8.13) | 7.1 (.2, .2.16, .2.20, .2.24, .2.28, .2.38, .2.42, .2.46, .2.49, .2.53, .2.61, .2.64, .2.72, .2.81) | 7.2 (.1, .1.9, .1.13, .1.19, .1.24, .2, .2.6, .2.10, .2.14, .2.18, .2.19, .2.22, .2.34, .3, .3.1, .3.12, .3.16, .4, .4.6, .4.9, .4.18, .4.25, .4.27, .4.30, .4.33, .5, .5.2, .5.4, .5.7, .5.8, .5.10) | 8.0 (.1.2, .2, .2.11, .2.15, .3, .3.6, .3.12, .3.19, .4, .4.3, .4.9, .4.16, .4.23, .4.25, .4.28, .4.31, .4.32, .4.33, .5, .5.20, .5.23, .5.25, .5.27, .5.28, .5.31) | 8.1 (Base, .1, .1.6, .2, .2.13, .2.15, .2.16, .2.19, .2.23, .2.24, .2.49, .2.50, .2.55, .2.56) | 8.2 (.0.45, .1, .1.11, .2, .2.9, .2.10, .2.12, .2.16, .2.17, .3, .4, .4.1, .4.4, .5, .5.13, .5.22, .5.26, .5.33, .5.40, .5.41) | 8.3 (.1, .1.1, .1.4, .1.6, .2, .2.4, .2.13, .2.23, .2.25, .2.31, .2.33, .2.34, .2.37) | 8.4 (Base, .1, .1.3, .1.11, .2, .2.1, .2.8, .3, .3.8, .3.9, .4, .4.1, .4.3, .4.5, .4.9, .5, .5.6, .6) | 8.5 (Base, .1, .1.1, .1.6, .1.7, .1.14, .1.17) | 8.6 (Base, .1, .1.1, .1.2, .1.5, .1.10) | 8.7 (.1, .1.1, .1.3, .1.4) | 9.0 (Base, .1, .2) | 9.1 (Base, .1, .1.4, .2)

  Associated Products