A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerability is due to an improper implementation of Galois/Counter Mode (GCM) ciphers. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting a sufficient number of encrypted messages across an affected IPsec IKEv2 VPN tunnel and then using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to decrypt, read, modify, and re-encrypt data that is transmitted across an affected IPsec IKEv2 VPN tunnel.
oryginał ENCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NCisco Adaptive Security Appliance Software
OSCisco9.17.0 – 9.17.1.7 (bez)< 9.12.4.389.13.0 – 9.14.4 (bez)9.15.0 – 9.15.1.21 (bez)9.16.0 – 9.16.2.14 (bez)Cisco Firepower Threat Defense
APPCisco7.1.06.5.0 – 6.6.5.2 (bez)7.0.0 – 7.0.2 (bez)< 6.4.0.15
Powiązane podatności
RCE jako root w Cisco ASA i FTD poprzez podatny serwer VPN web
RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP
RCE w podsystemie SSH Cisco ASA — wykonanie poleceń jako root
Cisco FTD: statyczne konta z zakodowanymi hasłami umożliwiają nieautoryzowany dostęp
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software cou...