Code injection

2015-10-2502:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

47.6%

JSON

The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.8), 9.2 before 9.2(4), and 9.3 before 9.3(3) allows remote attackers to cause a denial of service (device reload) via crafted ISAKMP UDP packets, aka Bug ID CSCus94026.

CPENameOperatorVersion
adaptive_security_appliance_softwareeq9.3.2
adaptive_security_appliance_softwareeq9.1.1.4
adaptive_security_appliance_softwareeq9.1.4
adaptive_security_appliance_softwareeq8.6.1.12
adaptive_security_appliance_softwareeq9.2.2.7
adaptive_security_appliance_softwareeq9.1.5.21
adaptive_security_appliance_softwareeq9.1.3
adaptive_security_appliance_softwareeq9.1.2
adaptive_security_appliance_softwareeq9.2.3
adaptive_security_appliance_softwareeq9.3.1.1

Name	Operator	Version
adaptive_security_appliance_software	eq	9.3.2
adaptive_security_appliance_software	eq	9.1.1.4
adaptive_security_appliance_software	eq	9.1.4
adaptive_security_appliance_software	eq	8.6.1.12
adaptive_security_appliance_software	eq	9.2.2.7
adaptive_security_appliance_software	eq	9.1.5.21
adaptive_security_appliance_software	eq	9.1.3
adaptive_security_appliance_software	eq	9.1.2
adaptive_security_appliance_software	eq	9.2.3
adaptive_security_appliance_software	eq	9.3.1.1