PT-2015-1628 · Cisco · Cisco Asa

CVE-2015-4239 · Publicado 2015-07-02 · Atualizado 2023-08-11

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.3(2.243) and 9.13(0.21)

Description The issue is related to resource management errors in the Cisco Adaptive Security Appliance, allowing an unauthenticated, adjacent attacker to cause a denial of service by sending crafted OSPFv2 packets on the local network. This can lead to a device reload.

Recommendations For version 9.3(2.243), update to a fixed version to resolve the issue. For version 9.13(0.21), update to a fixed version to resolve the issue. As a temporary workaround, consider restricting access to the OSPFv2 protocol to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-10971

CVE-2015-4239

Produtos afetados

Cisco Asa

Referências · 6

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39612 · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150702-CVE-2015-4239 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4239 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4239 · Nota de Segurança
• http://securitytracker.com/id/1032780 · Nota
• https://bdu.fstec.ru/vul/2015-10971 · Nota de Segurança