PT-2016-4793 · Cisco · Cisco Asa

CVE-2016-1445 · Publicado 2016-07-11 · Atualizado 2023-08-15

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 8.2 through 9.4.3.3

Description A bypass issue in the implementation of access control list (ACL) permit and deny filters for ICMP echo reply messages could allow an unauthenticated, remote attacker to bypass ACL configurations. This may result in ICMP traffic that should be denied being allowed through the affected device.

Recommendations For versions 8.2 through 9.4.3.3, consider restricting access to ICMP echo reply messages to minimize the risk of exploitation until a patch is available. As a temporary workaround, review and adjust ACL configurations to ensure they are properly set up to deny unwanted ICMP traffic.

Correção

Identificadores relacionados

CVE-2016-1445

Produtos afetados

Cisco Asa

Referências · 5

• http://securitytracker.com/id/1036271 · Nota
• https://osv.dev/vulnerability/CVE-2016-1445 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160711-asa · Aviso do Fabricante
• http://securityfocus.com/bid/91693 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1445 · Nota de Segurança