CVE-2015-4241

Cisco Adaptive Security Appliance ASA Software 9.32 allows remote attackers to cause a denial of service system reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCut52679...

Code injection

Cisco Adaptive Security Appliance ASA Software 9.32 allows remote attackers to cause a denial of service system reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCut52679...

CVE-2015-4241

Cisco Adaptive Security Appliance ASA Software 9.32 allows remote attackers to cause a denial of service system reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCut52679...

CVE-2015-4241

Cisco ASA Software (9.3(2)) is vulnerable to a denial-of-service (system reload) due to improper handling of OSPFv2 packets. The condition can be triggered by crafting OSPFv2 traffic on the local network from an adjacent attacker, as described in the CVE-2015-4241 family. Affected component: OSPF...

PT-2015-1629 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 9.32 Description: The issue is related to errors in resource management and allows an attacker to cause a denial of service by sending crafted OSPFv2 packets. This could lead to a system...

CVE-2015-4239

Cisco Adaptive Security Appliance ASA Software 9.32.243 and 100.130.21 allows remote attackers to cause a denial of service device reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA Software 9.32.243 and 100.130.21 allows remote attackers to cause a denial of service device reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220...

CVE-2015-4239

Cisco Adaptive Security Appliance ASA Software 9.32.243 and 100.130.21 allows remote attackers to cause a denial of service device reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220...

CVE-2015-4239

CVE-2015-4239 affects Cisco ASA software (ASA 9.3(2.243) and 100.13(0.21)). The vulnerability arises from improper handling of OSPFv2 packets in the ASA’s OSPFv2 code, allowing an unauthenticated, adjacent attacker on the local network to cause a denial of service and a device reload. Exploitatio...

CVE-2015-4238

The SNMP implementation in Cisco Adaptive Security Appliance ASA Software 8.47 and 8.61.2 allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601...

Design/Logic Flaw

The SNMP implementation in Cisco Adaptive Security Appliance ASA Software 8.47 and 8.61.2 allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601...

CVE-2015-4238

The SNMP implementation in Cisco Adaptive Security Appliance ASA Software 8.47 and 8.61.2 allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601...

CVE-2015-4238

Cisco ASA SNMP DoS (CVE-2015-4238) affects ASA Software 8.4(7) and 8.6(1.2). An authenticated remote attacker can cause a device reload by sending a high rate of SNMP requests during heavy network traffic due to SNMP handling/resource management issues (Bug CSCul02601). Impact is denial of servic...

PT-2015-1628 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.32.243 and 9.130.21 Description: The issue is related to resource management errors in the Cisco Adaptive Security Appliance, allowing an unauthenticated, adjacent attacker to cause a...

Cisco Adaptive Security Appliance SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of SNMP packets. An attacker could exploit th...

Cisco ASA AES-GCM Vulnerability (Cisco-SA-20150616-CVE-2015-4550)

Cisco ASA is prone to an encrypted IPSec or IKEv2 modification vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Cisco ASA XAUTH Bypass Vulnerability (Cisco-SA-20150602-CVE-2015-0760)

A vulnerability in IKE version 1 code of Cisco ASA Software could allow an authenticated, remote attacker to bypass Extended Authentication XAUTH and successfully log in via IPsec remote VPN. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

CVE-2015-4550

The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance ASA devices with software 9.33 and 9.41.1 does not verify the AES-GCM Integrity Check Value ICV octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, ak...

Code injection

The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance ASA devices with software 9.33 and 9.41.1 does not verify the AES-GCM Integrity Check Value ICV octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, ak...

CVE-2015-4550

CVE-2015-4550 affects Cisco ASA devices running ASA software 9.3(3) and 9.4(1.1), where the Cavium cryptographic-module firmware fails to verify AES-GCM ICV octets. This enables a remote attacker to perform a man-in-the-middle modification of IPSec/IKEv2 traffic without detection, effectively spo...