PT-2016-4793 · Cisco · Cisco Asa

Published 2016-07-11 · Updated 2023-08-15 · CVE-2016-1445

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 8.2 through 9.4.3.3

Description A bypass issue in the implementation of access control list (ACL) permit and deny filters for ICMP echo reply messages could allow an unauthenticated, remote attacker to bypass ACL configurations. This may result in ICMP traffic that should be denied being allowed through the affected device.

Recommendations For versions 8.2 through 9.4.3.3, consider restricting access to ICMP echo reply messages to minimize the risk of exploitation until a patch is available. As a temporary workaround, review and adjust ACL configurations to ensure they are properly set up to deny unwanted ICMP traffic.

Fix

Related Identifiers

CVE-2016-1445

Affected Products

Cisco Asa

References · 5

• https://osv.dev/vulnerability/CVE-2016-1445 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160711-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1445 · Security Note
• http://securitytracker.com/id/1036271 · Note
• http://securityfocus.com/bid/91693 · Note