PT-2015-1639 · Cavium+1 · Cavium Cryptographic-Module Firmware+1

Published 2015-07-14 · Updated 2023-08-11 · CVE-2015-4458

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software version 9.1(5.21)

Description The issue is related to the TLS implementation in the Cavium cryptographic-module firmware, which does not verify the MAC field. This allows man-in-the-middle attackers to spoof TLS content by modifying packets. The vulnerability can be exploited by a remote attacker to conduct man-in-the-middle attacks, potentially modifying the contents of an encrypted TLS packet without detection.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software version 9.1(5.21), consider updating to a newer version that addresses this issue. As a temporary workaround, restrict access to sensitive data transmitted over TLS to minimize the risk of exploitation. Avoid using the TLS protocol for critical communications until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

BDU:2015-10985

CVE-2015-4458

Affected Products

Cavium Cryptographic-Module Firmware

Cisco Asa

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-4458 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39919 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150714-CVE-2015-4458 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10985 · Security Note
• http://securitytracker.com/id/1032927 · Note