PT-2011-2316 · Cisco · Cisco Asa+2

Published 2011-02-23 · Updated 2023-08-11 · CVE-2011-0394

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.0 through 7.0(8.10) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 through 7.2(5.0) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.18) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.1(2.46) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 through 8.2(2.18) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.3 through 8.3(1.7) Cisco PIX Security Appliances 500 series devices (affected versions not specified) Cisco Firewall Services Module (FWSM) versions 3.1 through 3.1(19) Cisco Firewall Services Module (FWSM) versions 3.2 through 3.2(19) Cisco Firewall Services Module (FWSM) versions 4.0 through 4.0(14) Cisco Firewall Services Module (FWSM) versions 4.1 through 4.1(4)

Description The issue allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message.

Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.0 through 7.0(8.10), update to version 7.0(8.11) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 through 7.2(5.0), update to version 7.2(5.1) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.18), update to version 8.0(5.19) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.1(2.46), update to version 8.1(2.47) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 through 8.2(2.18), update to version 8.2(2.19) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.3 through 8.3(1.7), update to version 8.3(1.8) or later. For Cisco PIX Security Appliances 500 series devices, at the moment, there is no information about a newer version that contains a fix for this issue. For Cisco Firewall Services Module (FWSM) versions 3.1 through 3.1(19), update to version 3.1(20) or later. For Cisco Firewall Services Module (FWSM) versions 3.2 through 3.2(19), update to version 3.2(20) or later. For Cisco Firewall Services Module (FWSM) versions 4.0 through 4.0(14), update to version 4.0(15) or later. For Cisco Firewall Services Module (FWSM) versions 4.1 through 4.1(4), update to version 4.1(5) or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-0394

Affected Products

Cisco Asa

Cisco Firewall Services Module

Cisco Pix Security Appliances 500 Series

References · 12

• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e148.shtml · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110223-asa · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0394 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65593 · Note
• http://vupen.com/english/advisories/2011/0493 · Note
• http://securitytracker.com/id?1025108 · Note
• http://securitytracker.com/id?1025109 · Note
• http://secunia.com/advisories/43453 · Note
• http://vupen.com/english/advisories/2011/0494 · Note
• http://securityfocus.com/bid/46518 · Note
• http://secunia.com/advisories/43488 · Note