Lucene search

CiscoCVE-2014-3385

HistoryOct 10, 2014 - 10:55 a.m.

CVE-2014-3385

2014-10-1010:55:06

CWE-362

cisco

web.nvd.nist.gov

cve-2014-3385

cisco asa software

denial of service

security vulnerability

nvd

bug id cscum00556

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

56.2%

JSON

Race condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA Software 8.3 before 8.3(2.42), 8.4 before 8.4(7.11), 8.5 before 8.5(1.19), 8.6 before 8.6(1.13), 8.7 before 8.7(1.11), 9.0 before 9.0(4.8), and 9.1 before 9.1(4.5) allows remote attackers to cause a denial of service (device reload) via TCP traffic that triggers many half-open connections at the same time, aka Bug ID CSCum00556.

Affected configurations

Nvd

Node

ciscoasaMatch8.3

ciscoasaMatch8.3.2.25

ciscoasaMatch8.4

ciscoasaMatch8.4.1

ciscoasaMatch8.4.2

ciscoasaMatch8.4.3

ciscoasaMatch8.4.4

ciscoasaMatch8.4.5

ciscoasaMatch8.4.6

ciscoasaMatch8.4.7

ciscoasaMatch8.5

ciscoasaMatch8.5.1.6

ciscoasaMatch8.6

ciscoasaMatch8.7

ciscoasaMatch9.0

ciscoasaMatch9.1

VendorProductVersionCPE
ciscoasa8.3cpe:2.3:a:cisco:asa:8.3:*:*:*:*:*:*:*
ciscoasa8.3.2.25cpe:2.3:a:cisco:asa:8.3.2.25:*:*:*:*:*:*:*
ciscoasa8.4cpe:2.3:a:cisco:asa:8.4:*:*:*:*:*:*:*
ciscoasa8.4.1cpe:2.3:a:cisco:asa:8.4.1:*:*:*:*:*:*:*
ciscoasa8.4.2cpe:2.3:a:cisco:asa:8.4.2:*:*:*:*:*:*:*
ciscoasa8.4.3cpe:2.3:a:cisco:asa:8.4.3:*:*:*:*:*:*:*
ciscoasa8.4.4cpe:2.3:a:cisco:asa:8.4.4:*:*:*:*:*:*:*
ciscoasa8.4.5cpe:2.3:a:cisco:asa:8.4.5:*:*:*:*:*:*:*
ciscoasa8.4.6cpe:2.3:a:cisco:asa:8.4.6:*:*:*:*:*:*:*
ciscoasa8.4.7cpe:2.3:a:cisco:asa:8.4.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asa	8.3	cpe:2.3:a:cisco:asa:8.3:::::::*
cisco	asa	8.3.2.25	cpe:2.3:a:cisco:asa:8.3.2.25:::::::*
cisco	asa	8.4	cpe:2.3:a:cisco:asa:8.4:::::::*
cisco	asa	8.4.1	cpe:2.3:a:cisco:asa:8.4.1:::::::*
cisco	asa	8.4.2	cpe:2.3:a:cisco:asa:8.4.2:::::::*
cisco	asa	8.4.3	cpe:2.3:a:cisco:asa:8.4.3:::::::*
cisco	asa	8.4.4	cpe:2.3:a:cisco:asa:8.4.4:::::::*
cisco	asa	8.4.5	cpe:2.3:a:cisco:asa:8.4.5:::::::*
cisco	asa	8.4.6	cpe:2.3:a:cisco:asa:8.4.6:::::::*
cisco	asa	8.4.7	cpe:2.3:a:cisco:asa:8.4.7:::::::*