PT-2015-7181 · Cisco · Cisco Asa

Published

2015-10-21

·

Updated

2023-08-15

·

CVE-2015-6327

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) software versions 7.2 through 9.3 before 9.3(3) Cisco Adaptive Security Appliance (ASA) software version 8.2 before 8.2(5.58) Cisco Adaptive Security Appliance (ASA) software version 8.3 before 8.4(7.29) Cisco Adaptive Security Appliance (ASA) software version 8.4 before 8.4(7.29) Cisco Adaptive Security Appliance (ASA) software versions 8.5 through 8.7 before 8.7(1.17) Cisco Adaptive Security Appliance (ASA) software version 9.0 before 9.0(4.37) Cisco Adaptive Security Appliance (ASA) software version 9.1 before 9.1(6.8) Cisco Adaptive Security Appliance (ASA) software version 9.2 before 9.2(4)
Description The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software allows remote attackers to cause a denial of service (device reload) via crafted ISAKMP UDP packets.
Recommendations For version 7.2, update to a version after 9.3(3) to resolve the issue. For version 8.2, update to 8.2(5.58) or later to resolve the issue. For version 8.3, update to 8.4(7.29) or later to resolve the issue. For version 8.4, update to 8.4(7.29) or later to resolve the issue. For versions 8.5 through 8.7, update to 8.7(1.17) or later to resolve the issue. For version 9.0, update to 9.0(4.37) or later to resolve the issue. For version 9.1, update to 9.1(6.8) or later to resolve the issue. For version 9.2, update to 9.2(4) or later to resolve the issue. For version 9.3, update to 9.3(3) or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-6327

Affected Products

Cisco Asa