Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522.
AV:N/AC:M/Au:N/C:C/I:P/A:CCisco 5500 Series Adaptive Security Appliance
HWCiscoall versionsCisco 7600 Router
HWCiscoall versionsCisco Adaptive Security Appliance Software
OSCisco8.3\(1\)8.3\(2\)8.48.4\(1\)8.4\(1.11\)8.4\(2\)8.4\(2.11\)8.58.5\(1\)8.5\(1.4\)8.68.6\(1\)Cisco Catalyst 6500
HWCiscoall versionsCisco Catalyst 6503 E
HWCiscoall versionsCisco Catalyst 6504 E
HWCiscoall versionsCisco Catalyst 6506 E
HWCiscoall versionsCisco Catalyst 6509 E
HWCiscoall versionsCisco Catalyst 6509 Neb A
HWCiscoall versionsCisco Catalyst 6509 V E
HWCiscoall versionsCisco Catalyst 6513
HWCiscoall versionsCisco Catalyst 6513 E
HWCiscoall versions
Related vulnerabilities
RCE jako root w Cisco ASA i FTD poprzez podatny serwer VPN web
RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP
RCE w podsystemie SSH Cisco ASA — wykonanie poleceń jako root
Cisco ASA — obejście uwierzytelniania Kerberos w VPN (Auth Bypass)
Path Traversal w Cisco ASA i FTD — nieautoryzowany dostęp do plików przez WebVPN/AnyConnect