PT-2016-6905 · Cisco · Cisco Asa

Published 2016-10-19 · Updated 2023-08-15 · CVE-2016-6431

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions prior to 9.6(1.5)

Description A vulnerability in the local Certificate Authority (CA) feature could allow an unauthenticated, remote attacker to cause a reload of the affected system. The issue is due to improper handling of crafted packets during the enrollment operation. An attacker could exploit this by sending a crafted enrollment request to the affected system, specifically through HTTPS packets directed to the Cisco ASA interface where the local CA is allowing user enrollment. This affects systems configured in routed firewall mode and in single or multiple context mode.

Recommendations For versions prior to 9.6(1.5), update to version 9.6(1.5) or later to resolve the issue. As a temporary workaround, consider restricting access to the local CA feature to minimize the risk of exploitation. Additionally, limiting HTTPS packets to the Cisco ASA interface where the local CA is configured can help mitigate the vulnerability.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6431

Affected Products

Cisco Asa

References · 6

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-ca · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6431 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6431 · Vendor Advisory
• http://securitytracker.com/id/1037060 · Note
• https://t.me/cvenotify/56303 · Telegram Post
• http://securityfocus.com/bid/93786 · Note