Lucene search

[email protected]NVD:CVE-2014-3389

HistoryOct 10, 2014 - 10:55 a.m.

CVE-2014-3389

2014-10-1010:55:06

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0.002

Percentile

55.6%

JSON

The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.6), and 9.3 before 9.3(1.1) does not properly implement a tunnel filter, which allows remote authenticated users to obtain failover-unit access via crafted packets, aka Bug ID CSCuq28582.

Affected configurations

Nvd

Node

ciscoasaMatch7.2.5

ciscoasaMatch7.2.5.10

ciscoasaMatch8.2.5

ciscoasaMatch8.2.5.13

ciscoasaMatch8.2.5.22

ciscoasaMatch8.2.5.26

ciscoasaMatch8.2.5.33

ciscoasaMatch8.2.5.41

ciscoasaMatch8.2.5.46

ciscoasaMatch8.2.5.48

ciscoasaMatch8.2.5.49

ciscoasaMatch8.3

ciscoasaMatch8.3.2.25

ciscoasaMatch8.4

ciscoasaMatch8.4.1

ciscoasaMatch8.4.2

ciscoasaMatch8.4.3

ciscoasaMatch8.4.4

ciscoasaMatch8.4.5

ciscoasaMatch8.4.6

ciscoasaMatch8.4.7

ciscoasaMatch8.6

ciscoasaMatch9.0

ciscoasaMatch9.1

ciscoasaMatch9.2

ciscoasaMatch9.3

VendorProductVersionCPE
ciscoasa7.2.5cpe:2.3:a:cisco:asa:7.2.5:*:*:*:*:*:*:*
ciscoasa7.2.5.10cpe:2.3:a:cisco:asa:7.2.5.10:*:*:*:*:*:*:*
ciscoasa8.2.5cpe:2.3:a:cisco:asa:8.2.5:*:*:*:*:*:*:*
ciscoasa8.2.5.13cpe:2.3:a:cisco:asa:8.2.5.13:*:*:*:*:*:*:*
ciscoasa8.2.5.22cpe:2.3:a:cisco:asa:8.2.5.22:*:*:*:*:*:*:*
ciscoasa8.2.5.26cpe:2.3:a:cisco:asa:8.2.5.26:*:*:*:*:*:*:*
ciscoasa8.2.5.33cpe:2.3:a:cisco:asa:8.2.5.33:*:*:*:*:*:*:*
ciscoasa8.2.5.41cpe:2.3:a:cisco:asa:8.2.5.41:*:*:*:*:*:*:*
ciscoasa8.2.5.46cpe:2.3:a:cisco:asa:8.2.5.46:*:*:*:*:*:*:*
ciscoasa8.2.5.48cpe:2.3:a:cisco:asa:8.2.5.48:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asa	7.2.5	cpe:2.3:a:cisco:asa:7.2.5:::::::*
cisco	asa	7.2.5.10	cpe:2.3:a:cisco:asa:7.2.5.10:::::::*
cisco	asa	8.2.5	cpe:2.3:a:cisco:asa:8.2.5:::::::*
cisco	asa	8.2.5.13	cpe:2.3:a:cisco:asa:8.2.5.13:::::::*
cisco	asa	8.2.5.22	cpe:2.3:a:cisco:asa:8.2.5.22:::::::*
cisco	asa	8.2.5.26	cpe:2.3:a:cisco:asa:8.2.5.26:::::::*
cisco	asa	8.2.5.33	cpe:2.3:a:cisco:asa:8.2.5.33:::::::*
cisco	asa	8.2.5.41	cpe:2.3:a:cisco:asa:8.2.5.41:::::::*
cisco	asa	8.2.5.46	cpe:2.3:a:cisco:asa:8.2.5.46:::::::*
cisco	asa	8.2.5.48	cpe:2.3:a:cisco:asa:8.2.5.48:::::::*