PT-2011-4374 · Cisco · Cisco Firewall Services Module

Published 2011-10-06 · Updated 2017-08-29 · CVE-2011-3296

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module (aka FWSM) versions 3.1 before 3.1(21) Cisco Firewall Services Module (aka FWSM) versions 3.2 before 3.2(22) Cisco Firewall Services Module (aka FWSM) versions 4.0 before 4.0(16) Cisco Firewall Services Module (aka FWSM) versions 4.1 before 4.1(7)

Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and module crash or hang, via vectors that trigger syslog message 302015 when IPv6 is used.

Recommendations For Cisco Firewall Services Module (aka FWSM) version 3.1, update to version 3.1(21) or later. For Cisco Firewall Services Module (aka FWSM) version 3.2, update to version 3.2(22) or later. For Cisco Firewall Services Module (aka FWSM) version 4.0, update to version 4.0(16) or later. For Cisco Firewall Services Module (aka FWSM) version 4.1, update to version 4.1(7) or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-3296

Affected Products

Cisco Firewall Services Module

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-3296 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70326 · Note