PT-2014-5289 · Cisco · Cisco Asa

Publicado 2014-10-06 · Atualizado 2022-06-02 · CVE-2014-3399

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.2(.2.4) and earlier

Description The issue is related to the SSL VPN implementation, which does not properly manage session information during the creation of a SharePoint handler. This allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs via crafted HTTP requests. As a result, it can cause a denial of service, leading to a portal outage or system reload.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software versions 9.2(.2.4) and earlier, consider restricting access to the SSL VPN until a patch is available. As a temporary workaround, limit the ability to inject Lua scripts or overwrite RAMFS cache files to minimize the risk of exploitation.

Correção

DoS

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2014-3399

Produtos afetados

Cisco Asa

Referências · 5

• http://tools.cisco.com/security/center/viewAlert.x?alertId=35989 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3399 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141006-CVE-2014-3399 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3399 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3399 · Nota