PT-2017-17181 · Cisco · Cisco Asa

Published 2017-04-19 · Updated 2023-08-15 · CVE-2017-6610

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions prior to 9.1(7.7) Cisco ASA Software versions prior to 9.2(4.11) Cisco ASA Software versions prior to 9.4(4) Cisco ASA Software versions prior to 9.5(3) Cisco ASA Software versions prior to 9.6(1.5)

Description A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code could allow an authenticated, remote attacker to cause a reload of an affected system. The issue is due to insufficient validation of the IKEv1 XAUTH parameters passed during an IKEv1 negotiation. An attacker could exploit this by sending crafted parameters. Note that only traffic directed to the affected system can be used to exploit this vulnerability, and a valid IKEv1 Phase 1 needs to be established, which requires knowledge of a pre-shared key or a valid certificate for phase 1 authentication.

Recommendations For versions prior to 9.1(7.7), update to version 9.1(7.7) or later. For versions prior to 9.2(4.11), update to version 9.2(4.11) or later. For versions prior to 9.4(4), update to version 9.4(4) or later. For versions prior to 9.5(3), update to version 9.5(3) or later. For versions prior to 9.6(1.5), update to version 9.6(1.5) or later.

Fix

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

CVE-2017-6610

Affected Products

Cisco Asa

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-xauth · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6610 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6610 · Security Note
• http://securityfocus.com/bid/97934 · Note
• http://securitytracker.com/id/1038314 · Note