PT-2011-4380 · Cisco · Cisco Asa+1

Published 2011-10-05 · Updated 2023-08-15 · CVE-2011-3302

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.0 through 7.0(8.12) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 through 7.2(5.3) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.24) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.2(5.10) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.3 through 8.3(2.22) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.4 through 8.4(2.5) Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.5(1.0) Cisco Firewall Services Module (FWSM) versions 3.1 through 3.1(20) Cisco Firewall Services Module (FWSM) versions 3.2 through 3.2(21) Cisco Firewall Services Module (FWSM) versions 4.0 through 4.0(15) Cisco Firewall Services Module (FWSM) versions 4.1 through 4.1(6)

Description Remote attackers can cause a denial of service (device reload) via crafted SunRPC traffic.

Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 7.0, update to 7.0(8.13) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 and 7.2, update to 7.2(5.4) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.0, update to 8.0(5.25) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 and 8.2, update to 8.2(5.11) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.3, update to 8.3(2.23) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.4, update to 8.4(2.6) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.5, update to 8.5(1.1) or later. For Cisco Firewall Services Module (FWSM) version 3.1, update to 3.1(21) or later. For Cisco Firewall Services Module (FWSM) version 3.2, update to 3.2(22) or later. For Cisco Firewall Services Module (FWSM) version 4.0, update to 4.0(16) or later. For Cisco Firewall Services Module (FWSM) version 4.1, update to 4.1(7) or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-3302

Affected Products

Cisco Asa

Cisco Firewall Services Module

References · 6

• http://cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3302 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111005-asa · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml · Vendor Advisory
• http://osvdb.org/76089 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70333 · Note