CWE Code: 704
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Incorrect Type Conversion or Cast
Summary: a vulnerability in the secure copy (scp) feature of cisco adaptive security appliance (asa) software could allow an authenticated, remote attacker to cause a denial of service (dos) condition. the vulnerability is due to the use of an incorrect data type for a length variable. an attacker could exploit this vulnerability by initiating the transfer of a large file to an affected device via scp. to exploit this vulnerability, the attacker would need to have valid privilege level 15 credentials on the affected device. a successful exploit could allow the attacker to cause the length variable to roll over, which could cause the affected device to crash.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2019-10-02
Last Modified Date: 2019-10-10