PT-2015-7181 · Cisco · Cisco Asa
CVE-2015-6327
·
Publicado
2015-10-21
·
Atualizado
2023-08-15
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Adaptive Security Appliance (ASA) software versions 7.2 through 9.3 before 9.3(3)
Cisco Adaptive Security Appliance (ASA) software version 8.2 before 8.2(5.58)
Cisco Adaptive Security Appliance (ASA) software version 8.3 before 8.4(7.29)
Cisco Adaptive Security Appliance (ASA) software version 8.4 before 8.4(7.29)
Cisco Adaptive Security Appliance (ASA) software versions 8.5 through 8.7 before 8.7(1.17)
Cisco Adaptive Security Appliance (ASA) software version 9.0 before 9.0(4.37)
Cisco Adaptive Security Appliance (ASA) software version 9.1 before 9.1(6.8)
Cisco Adaptive Security Appliance (ASA) software version 9.2 before 9.2(4)
Description
The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software allows remote attackers to cause a denial of service (device reload) via crafted ISAKMP UDP packets.
Recommendations
For version 7.2, update to a version after 9.3(3) to resolve the issue.
For version 8.2, update to 8.2(5.58) or later to resolve the issue.
For version 8.3, update to 8.4(7.29) or later to resolve the issue.
For version 8.4, update to 8.4(7.29) or later to resolve the issue.
For versions 8.5 through 8.7, update to 8.7(1.17) or later to resolve the issue.
For version 9.0, update to 9.0(4.37) or later to resolve the issue.
For version 9.1, update to 9.1(6.8) or later to resolve the issue.
For version 9.2, update to 9.2(4) or later to resolve the issue.
For version 9.3, update to 9.3(3) or later to resolve the issue.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Asa