CVE-2005-3788
CVE-2005-3788 is a medium-severity vulnerability in Cisco Adaptive Security Appliance Software with a CVSS 2.0 base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.4)
- EPSS exploit prediction: 2% (76th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Adaptive Security Appliance Software
- Published:
- Last modified:
Description
Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."
Frequently asked questions
- What is CVE-2005-3788?
- Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."
- How severe is CVE-2005-3788?
- CVE-2005-3788 has a CVSS 2.0 base score of 5.4, rated medium severity.
- Is CVE-2005-3788 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (76th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-3788?
- CVE-2005-3788 primarily affects Cisco Adaptive Security Appliance Software. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-3788?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-3788 published?
- CVE-2005-3788 was published on 2005-11-24 and last updated on 2026-06-16.
References
- http://marc.info/?l=bugtraq&m=113199814008230&w=2
- http://marc.info/?l=bugtraq&m=113201784415859&w=2
- http://secunia.com/advisories/17550/
- http://securityreason.com/securityalert/178
- http://securitytracker.com/id?1015205
- http://www.securityfocus.com/bid/15407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23160
Affected products (3)
- cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(0\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(4\):*:*:*:*:*:*:*
More vulnerabilities in Cisco Adaptive Security Appliance Software
- CVE-2018-0101 — Critical (CVSS 10.0): A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA)…
- CVE-2013-5511 — Critical (CVSS 10.0): The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA)…
- CVE-2013-5509 — Critical (CVSS 10.0): The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2)…
- CVE-2007-2462 — Critical (CVSS 10.0): Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2…
- CVE-2025-20333 — Critical (CVSS 9.9): A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco…
- CVE-2024-20329 — Critical (CVSS 9.9): A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated,…
All CVEs affecting Cisco Adaptive Security Appliance Software →