CVE-2013-6707
Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA)...
Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.
Exploit likelihood
What each source reports
NVD Score used
Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.
- Record
CVE-2013-6707- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-772
- Updated
- 2026-11-02
CVE List No score
Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.
- Record
CVE-2013-6707- Updated
- 2026-11-02
EUVDEUVD-2013-6509 No score
Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.
- Record
EUVD-2013-6509- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wjrw-qp67-6h86 No score
Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA)...
Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.
- Record
GHSA-wjrw-qp67-6h86- Weakness
- CWE-772
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6707 is a medium vulnerability (CVSS 4.3) in Cisco Adaptive Security Appliance Software, published December 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. No source names a fixed version.
References
securityfocus.com/bid/64148
exchange.xforce.ibmcloud.com/vulnerabilities/89442
securitytracker.com/id/1029441
osvdb.org/100682
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6707
nvd.nist.gov/vuln/detail/CVE-2013-6707
github.com/advisories/GHSA-wjrw-qp67-6h86