CVE-2015-4238

2015-07-0214:59:02

CWE-399

[email protected]

web.nvd.nist.gov

cisco

asa

software

snmp

implementation

vulnerability

cve-2015-4238

nvd

bug id cscul02601

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.0%

JSON

The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601.

Affected configurations

NVD

Node

ciscoadaptive_security_appliance_softwareMatch8.4\(7\)

ciscoadaptive_security_appliance_softwareMatch8.6\(1.2\)

CPENameOperatorVersion
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.4\(7\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.6\(1.2\)

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.4\(7\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.6\(1.2\)