Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20150408-asa)

The remote Cisco Adaptive Security Appliance ASA is missing a vendor-supplied security patch and is therefore affected by the following vulnerabilities : - A flaw exists in the failover ipsec feature due to not properly handling failover communication messages. An unauthenticated attacker, sendin...

CVE-2015-0675

The CVE-2015-0675 issue affects Cisco ASA Software (failover IPsec feature) where failover communication messages are not properly validated. This allows a remote attacker to reconfigure an ASA device and potentially gain administrative control by sending crafted UDP packets over the local networ...