PT-2015-1628 · Cisco · Cisco Asa

Published 2015-07-02 · Updated 2023-08-11 · CVE-2015-4239

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 9.3(2.243) and 9.13(0.21)

Description The issue is related to resource management errors in the Cisco Adaptive Security Appliance, allowing an unauthenticated, adjacent attacker to cause a denial of service by sending crafted OSPFv2 packets on the local network. This can lead to a device reload.

Recommendations For version 9.3(2.243), update to a fixed version to resolve the issue. For version 9.13(0.21), update to a fixed version to resolve the issue. As a temporary workaround, consider restricting access to the OSPFv2 protocol to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-10971

CVE-2015-4239

Affected Products

Cisco Asa

References · 6

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39612 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150702-CVE-2015-4239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-4239 · Security Note
• https://bdu.fstec.ru/vul/2015-10971 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4239 · Note
• http://securitytracker.com/id/1032780 · Note