PT-2015-1411 · Cisco · Cisco Asa

Published 2015-06-02 · Updated 2022-05-31 · CVE-2015-0760

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions 7.x through 8.2.x before 8.2.2.13

Description The issue is related to the IKEv1 implementation in Cisco ASA Software, which allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets. This can enable a remote attacker to bypass Extended Authentication and successfully log in via IPsec remote VPN. The vulnerability is associated with errors in security settings and insufficient access control to certain functions.

Recommendations For versions 7.x through 8.2.x before 8.2.2.13, update to version 8.2.2.13 or later to resolve the issue. As a temporary workaround, consider restricting access to IKEv1 packets to minimize the risk of exploitation. Restrict access to the IPsec remote VPN functionality until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-264

CWE-20

Related Identifiers

BDU:2015-10506

BDU:2015-10937

CVE-2015-0760

Affected Products

Cisco Asa

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2015-0760 · Security Note
• https://bdu.fstec.ru/vul/2015-10506 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39157 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10937 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150602-CVE-2015-0760 · Vendor Advisory
• https://t.me/cvenotify/30910 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0760 · Note
• http://securitytracker.com/id/1032473 · Note