CVE-2016-1312

CVE-2016-1312 describes a denial-of-service vulnerability in the HTTPS inspection engine of the Cisco ASA 5500 Content Security and Control Security Services Module (CSC-SSM) 6.6 prior to version 6.6.1164.0. An unauthenticated remote attacker can exploit this flaw by sending a flood of HTTPS packets, leading to excessive memory consumption or a device reload. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, resulting in a complete loss of availability. While there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and community discussion and media coverage are minimal.