PT-2014-5289 · Cisco · Cisco Asa

Published 2014-10-06 · Updated 2022-06-02 · CVE-2014-3399

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.2(.2.4) and earlier

Description The issue is related to the SSL VPN implementation, which does not properly manage session information during the creation of a SharePoint handler. This allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs via crafted HTTP requests. As a result, it can cause a denial of service, leading to a portal outage or system reload.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software versions 9.2(.2.4) and earlier, consider restricting access to the SSL VPN until a patch is available. As a temporary workaround, limit the ability to inject Lua scripts or overwrite RAMFS cache files to minimize the risk of exploitation.

Fix

DoS

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2014-3399

Affected Products

Cisco Asa

References · 5

• http://tools.cisco.com/security/center/viewAlert.x?alertId=35989 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3399 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141006-CVE-2014-3399 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3399 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3399 · Note