PT-2015-1381 · Cisco · Cisco Asa

Published 2015-05-20 · Updated 2023-08-15 · CVE-2015-0742

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.2(0.0) through 9.4(0.115) Cisco Adaptive Security Appliance (ASA) Software versions 100.13(0.21) through 100.14(1.1)

Description The issue is related to the Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software, which does not properly implement multicast-forwarding registration. This allows remote attackers to cause a denial of service (forwarding outage) via a crafted multicast packet. The vulnerability can be exploited by an unauthenticated, remote attacker to disrupt the multicast traffic forwarding on the affected device via a denial-of-service (DoS) attack.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software versions 9.2(0.0) through 9.4(0.115), update to a fixed version to resolve the issue. For Cisco Adaptive Security Appliance (ASA) Software versions 100.13(0.21) through 100.14(1.1), update to a fixed version to resolve the issue. As a temporary workaround, consider restricting access to the PIM application to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-17

CWE-399

Related Identifiers

BDU:2015-10474

CVE-2015-0742

Affected Products

Cisco Asa

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150520-CVE-2015-0742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0742 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38937 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10474 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0742 · Note
• http://securityfocus.com/bid/74750 · Note
• http://securitytracker.com/id/1032381 · Note