A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance (ASAv) and Firepower 2100 Series running Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device that results in a denial of service (DoS) condition. The vulnerability is due to a logic error with how the software cryptography module handles IPsec sessions. An attacker could exploit this vulnerability by creating and sending traffic in a high number of IPsec sessions through the targeted device. A successful exploit could cause the device to reload and result in a DoS condition.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCisco Adaptive Security Appliance Software
OSCisco9.9 – 9.9.2.50Cisco Asa 5506h X
HWCiscowszystkie wersjeCisco Asa 5506w X
HWCiscowszystkie wersjeCisco Asa 5506 X
HWCiscowszystkie wersjeCisco Asa 5508 X
HWCiscowszystkie wersjeCisco Asa 5516 X
HWCiscowszystkie wersjeCisco Asa 5525 X
HWCiscowszystkie wersjeCisco Asa 5545 X
HWCiscowszystkie wersjeCisco Asa 5555 X
HWCiscowszystkie wersje
Powiązane podatności
RCE jako root w Cisco ASA i FTD poprzez podatny serwer VPN web
RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP
RCE w podsystemie SSH Cisco ASA — wykonanie poleceń jako root
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software cou...
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi...