PT-2014-3803 · Cisco · Cisco Asa

Published 2014-02-21 · Updated 2023-08-15 · CVE-2014-0739

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software version 9.1.3 and earlier

Description A race condition in the Phone Proxy component allows remote attackers to bypass sec db authentication and provide certain pass-through services to untrusted devices via a crafted configuration-file TFTP request. This issue could allow an unauthenticated, remote attacker to pass traffic from an untrusted phone through the ASA.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software version 9.1.3 and earlier, consider disabling the Phone Proxy feature until a patch is available to prevent exploitation. Restrict access to the TFTP request function of the Phone Proxy feature to minimize the risk of exploitation. Avoid using crafted configuration-file TFTP requests in the affected Phone Proxy component until the issue is resolved.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-0739

Affected Products

Cisco Asa

References · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0739 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140221-CVE-2014-0739 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32955 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0739 · Security Note