PT-2011-2315 · Cisco · Cisco Asa+1

Published 2011-02-23 · Updated 2023-08-11 · CVE-2011-0393

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.0 through 7.0(8.11) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 through 7.2(5.1) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.20) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.1(2.48) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 through 8.2(3.5) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.3 through 8.3(2.6) Cisco PIX Security Appliances 500 series devices (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in packet buffer exhaustion and device outage, via IPv6 traffic when transparent firewall mode is configured but IPv6 is not configured.

Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 7.0, update to version 7.0(8.12) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 and 7.2, update to version 7.2(5.2) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.0, update to version 8.0(5.21) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.1, update to version 8.1(2.49) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.2, update to version 8.2(3.6) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.3, update to version 8.3(2.7) or later. For Cisco PIX Security Appliances 500 series devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-0393

Affected Products

Cisco Asa

Cisco Pix Security Appliances 500 Series

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110223-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0393 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65589 · Note
• http://vupen.com/english/advisories/2011/0493 · Note
• http://secunia.com/advisories/43488 · Note
• http://securitytracker.com/id?1025108 · Note