Lucene search

CiscoCISCO-SA-20151123-ASA

HistoryNov 24, 2015 - 8:30 a.m.

Cisco ASA Management Interface XML Parser Denial of Service Vulnerability

2015-11-2408:30:00

tools.cisco.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

EPSS

0.001

Percentile

43.8%

JSON

A vulnerability in the XML parser of the management interface in Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause system instability and possibly crash an affected system.

The vulnerability is due to insufficient hardening of the XML parser code. An attacker could exploit this vulnerability by triggering the affected component to perform a read operation of a crafted XML file.

Cisco has released software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability.

This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-asa[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-asa”]

Affected configurations

Vulners

Node

ciscoadaptive_security_appliance_softwareMatch7.2

ciscoadaptive_security_appliance_softwareMatch8.0

ciscoadaptive_security_appliance_softwareMatch8.2

ciscoadaptive_security_appliance_softwareMatch8.1

ciscoadaptive_security_appliance_softwareMatch8.3

ciscoadaptive_security_appliance_softwareMatch8.5

ciscoadaptive_security_appliance_softwareMatch8.6

ciscoadaptive_security_appliance_softwareMatch8.7

ciscoadaptive_security_appliance_softwareMatch9.0

ciscoadaptive_security_appliance_softwareMatch9.1

ciscoadaptive_security_appliance_softwareMatch9.2

ciscoadaptive_security_appliance_softwareMatch9.3

ciscoadaptive_security_appliance_softwareMatch7.2.2.34

ciscoadaptive_security_appliance_softwareMatch7.2.3.1

ciscoadaptive_security_appliance_softwareMatch7.2.2

ciscoadaptive_security_appliance_softwareMatch7.2.4

ciscoadaptive_security_appliance_softwareMatch7.2.3

ciscoadaptive_security_appliance_softwareMatch7.2.1

ciscoadaptive_security_appliance_softwareMatch7.2.4.27

ciscoadaptive_security_appliance_softwareMatch7.2.4.30

ciscoadaptive_security_appliance_softwareMatch7.2.5

ciscoadaptive_security_appliance_softwareMatch7.2.4.33

ciscoadaptive_security_appliance_softwareMatch7.2.1.9

ciscoadaptive_security_appliance_softwareMatch7.2.1.13

ciscoadaptive_security_appliance_softwareMatch7.2.1.19

ciscoadaptive_security_appliance_softwareMatch7.2.1.24

ciscoadaptive_security_appliance_softwareMatch7.2.2.6

ciscoadaptive_security_appliance_softwareMatch7.2.2.10

ciscoadaptive_security_appliance_softwareMatch7.2.2.14

ciscoadaptive_security_appliance_softwareMatch7.2.2.18

ciscoadaptive_security_appliance_softwareMatch7.2.2.19

ciscoadaptive_security_appliance_softwareMatch7.2.2.22

ciscoadaptive_security_appliance_softwareMatch7.2.3.12

ciscoadaptive_security_appliance_softwareMatch7.2.3.16

ciscoadaptive_security_appliance_softwareMatch7.2.4.6

ciscoadaptive_security_appliance_softwareMatch7.2.4.9

ciscoadaptive_security_appliance_softwareMatch7.2.4.18

ciscoadaptive_security_appliance_softwareMatch7.2.4.25

ciscoadaptive_security_appliance_softwareMatch7.2.5.2

ciscoadaptive_security_appliance_softwareMatch7.2.5.4

ciscoadaptive_security_appliance_softwareMatch7.2.5.7

ciscoadaptive_security_appliance_softwareMatch7.2.5.8

ciscoadaptive_security_appliance_softwareMatch7.2.5.10

ciscoadaptive_security_appliance_softwareMatch7.2.5.12

ciscoadaptive_security_appliance_softwareMatch7.2.5.16

ciscoadaptive_security_appliance_softwareMatch8.0.2.11

ciscoadaptive_security_appliance_softwareMatch8.0.4

ciscoadaptive_security_appliance_softwareMatch8.0.3

ciscoadaptive_security_appliance_softwareMatch8.0.2

ciscoadaptive_security_appliance_softwareMatch8.0.1.2

ciscoadaptive_security_appliance_softwareMatch8.0.4.25

ciscoadaptive_security_appliance_softwareMatch8.0.4.28

ciscoadaptive_security_appliance_softwareMatch8.0.4.33

ciscoadaptive_security_appliance_softwareMatch8.0.4.32

ciscoadaptive_security_appliance_softwareMatch8.0.5

ciscoadaptive_security_appliance_softwareMatch8.0.2.15

ciscoadaptive_security_appliance_softwareMatch8.0.3.6

ciscoadaptive_security_appliance_softwareMatch8.0.3.12

ciscoadaptive_security_appliance_softwareMatch8.0.3.19

ciscoadaptive_security_appliance_softwareMatch8.0.4.3

ciscoadaptive_security_appliance_softwareMatch8.0.4.9

ciscoadaptive_security_appliance_softwareMatch8.0.4.16

ciscoadaptive_security_appliance_softwareMatch8.0.4.23

ciscoadaptive_security_appliance_softwareMatch8.0.4.31

ciscoadaptive_security_appliance_softwareMatch8.0.5.20

ciscoadaptive_security_appliance_softwareMatch8.0.5.23

ciscoadaptive_security_appliance_softwareMatch8.0.5.25

ciscoadaptive_security_appliance_softwareMatch8.0.5.27

ciscoadaptive_security_appliance_softwareMatch8.0.5.28

ciscoadaptive_security_appliance_softwareMatch8.0.5.31

ciscoadaptive_security_appliance_softwareMatch8.2.0.45

ciscoadaptive_security_appliance_softwareMatch8.2.1

ciscoadaptive_security_appliance_softwareMatch8.2.2

ciscoadaptive_security_appliance_softwareMatch8.2.2.10

ciscoadaptive_security_appliance_softwareMatch8.2.3

ciscoadaptive_security_appliance_softwareMatch8.2.4

ciscoadaptive_security_appliance_softwareMatch8.2.1.11

ciscoadaptive_security_appliance_softwareMatch8.2.2.9

ciscoadaptive_security_appliance_softwareMatch8.2.2.12

ciscoadaptive_security_appliance_softwareMatch8.2.2.16

ciscoadaptive_security_appliance_softwareMatch8.2.4.1

ciscoadaptive_security_appliance_softwareMatch8.2.4.4

ciscoadaptive_security_appliance_softwareMatch8.2.5

ciscoadaptive_security_appliance_softwareMatch8.2.5.13

ciscoadaptive_security_appliance_softwareMatch8.2.5.22

ciscoadaptive_security_appliance_softwareMatch8.2.5.26

ciscoadaptive_security_appliance_softwareMatch8.2.2.17

ciscoadaptive_security_appliance_softwareMatch8.2.5.33

ciscoadaptive_security_appliance_softwareMatch8.2.5.40

ciscoadaptive_security_appliance_softwareMatch8.2.5.41

ciscoadaptive_security_appliance_softwareMatch8.2.5.46

ciscoadaptive_security_appliance_softwareMatch8.2.5.48

ciscoadaptive_security_appliance_softwareMatch8.2.5.50

ciscoadaptive_security_appliance_softwareMatch8.2.5.52

ciscoadaptive_security_appliance_softwareMatch8.2.5.55

ciscoadaptive_security_appliance_softwareMatch8.2.5.57

ciscoadaptive_security_appliance_softwareMatch8.1.1

ciscoadaptive_security_appliance_softwareMatch8.1.2

ciscoadaptive_security_appliance_softwareMatch8.1.2.15

ciscoadaptive_security_appliance_softwareMatch8.1.2.16

ciscoadaptive_security_appliance_softwareMatch8.1.2.19

ciscoadaptive_security_appliance_softwareMatch8.1.2.23

ciscoadaptive_security_appliance_softwareMatch8.1.2.24

ciscoadaptive_security_appliance_softwareMatch8.1.2.50

ciscoadaptive_security_appliance_softwareMatch8.1.1.6

ciscoadaptive_security_appliance_softwareMatch8.1.2.13

ciscoadaptive_security_appliance_softwareMatch8.1.2.49

ciscoadaptive_security_appliance_softwareMatch8.1.2.55

ciscoadaptive_security_appliance_softwareMatch8.1.2.56

ciscoadaptive_security_appliance_softwareMatch8.1.0.104

ciscoadaptive_security_appliance_softwareMatch8.3.1.1

ciscoadaptive_security_appliance_softwareMatch8.3.1

ciscoadaptive_security_appliance_softwareMatch8.3.2

ciscoadaptive_security_appliance_softwareMatch8.3.2.23

ciscoadaptive_security_appliance_softwareMatch8.3.2.25

ciscoadaptive_security_appliance_softwareMatch8.3.1.4

ciscoadaptive_security_appliance_softwareMatch8.3.1.6

ciscoadaptive_security_appliance_softwareMatch8.3.2.4

ciscoadaptive_security_appliance_softwareMatch8.3.2.13

ciscoadaptive_security_appliance_softwareMatch8.3.2.31

ciscoadaptive_security_appliance_softwareMatch8.3.2.33

ciscoadaptive_security_appliance_softwareMatch8.3.2.34

ciscoadaptive_security_appliance_softwareMatch8.3.2.37

ciscoadaptive_security_appliance_softwareMatch8.3.2.39

ciscoadaptive_security_appliance_softwareMatch8.3.2.40

ciscoadaptive_security_appliance_softwareMatch8.3.2.41

ciscoadaptive_security_appliance_softwareMatch8.3.2.44

ciscoadaptive_security_appliance_softwareMatch8.5.1

ciscoadaptive_security_appliance_softwareMatch8.5.1.1

ciscoadaptive_security_appliance_softwareMatch8.5.1.6

ciscoadaptive_security_appliance_softwareMatch8.5.1.7

ciscoadaptive_security_appliance_softwareMatch8.5.1.14

ciscoadaptive_security_appliance_softwareMatch8.5.1.17

ciscoadaptive_security_appliance_softwareMatch8.5.1.18

ciscoadaptive_security_appliance_softwareMatch8.5.1.19

ciscoadaptive_security_appliance_softwareMatch8.5.1.21

ciscoadaptive_security_appliance_softwareMatch8.5.1.24

ciscoadaptive_security_appliance_softwareMatch8.6.1.1

ciscoadaptive_security_appliance_softwareMatch8.6.1

ciscoadaptive_security_appliance_softwareMatch8.6.1.2

ciscoadaptive_security_appliance_softwareMatch8.6.1.5

ciscoadaptive_security_appliance_softwareMatch8.6.1.10

ciscoadaptive_security_appliance_softwareMatch8.6.1.12

ciscoadaptive_security_appliance_softwareMatch8.6.1.13

ciscoadaptive_security_appliance_softwareMatch8.6.1.14

ciscoadaptive_security_appliance_softwareMatch8.6.1.17

ciscoadaptive_security_appliance_softwareMatch8.7.1

ciscoadaptive_security_appliance_softwareMatch8.7.1.1

ciscoadaptive_security_appliance_softwareMatch8.7.1.3

ciscoadaptive_security_appliance_softwareMatch8.7.1.4

ciscoadaptive_security_appliance_softwareMatch8.7.1.7

ciscoadaptive_security_appliance_softwareMatch8.7.1.8

ciscoadaptive_security_appliance_softwareMatch8.7.1.11

ciscoadaptive_security_appliance_softwareMatch8.7.1.13

ciscoadaptive_security_appliance_softwareMatch8.7.1.16

ciscoadaptive_security_appliance_softwareMatch8.7.1.17

ciscoadaptive_security_appliance_softwareMatch9.0.1

ciscoadaptive_security_appliance_softwareMatch9.0.2

ciscoadaptive_security_appliance_softwareMatch9.0.2.10

ciscoadaptive_security_appliance_softwareMatch9.0.3

ciscoadaptive_security_appliance_softwareMatch9.0.3.6

ciscoadaptive_security_appliance_softwareMatch9.0.3.8

ciscoadaptive_security_appliance_softwareMatch9.0.4

ciscoadaptive_security_appliance_softwareMatch9.0.4.1

ciscoadaptive_security_appliance_softwareMatch9.0.4.5

ciscoadaptive_security_appliance_softwareMatch9.0.4.17

ciscoadaptive_security_appliance_softwareMatch9.0.4.20

ciscoadaptive_security_appliance_softwareMatch9.0.4.24

ciscoadaptive_security_appliance_softwareMatch9.0.4.7

ciscoadaptive_security_appliance_softwareMatch9.0.4.26

ciscoadaptive_security_appliance_softwareMatch9.0.4.29

ciscoadaptive_security_appliance_softwareMatch9.0.4.33

ciscoadaptive_security_appliance_softwareMatch9.0.4.37

ciscoadaptive_security_appliance_softwareMatch9.0.4.35

ciscoadaptive_security_appliance_softwareMatch9.1.1

ciscoadaptive_security_appliance_softwareMatch9.1.1.4

ciscoadaptive_security_appliance_softwareMatch9.1.2

ciscoadaptive_security_appliance_softwareMatch9.1.3

ciscoadaptive_security_appliance_softwareMatch9.1.2.8

ciscoadaptive_security_appliance_softwareMatch9.1.3.2

ciscoadaptive_security_appliance_softwareMatch9.1.4

ciscoadaptive_security_appliance_softwareMatch9.1.4.5

ciscoadaptive_security_appliance_softwareMatch9.1.5

ciscoadaptive_security_appliance_softwareMatch9.1.5.10

ciscoadaptive_security_appliance_softwareMatch9.1.5.12

ciscoadaptive_security_appliance_softwareMatch9.1.5.15

ciscoadaptive_security_appliance_softwareMatch9.1.6

ciscoadaptive_security_appliance_softwareMatch9.1.5.21

ciscoadaptive_security_appliance_softwareMatch9.1.6.1

ciscoadaptive_security_appliance_softwareMatch9.1.6.6

ciscoadaptive_security_appliance_softwareMatch9.1.6.4

ciscoadaptive_security_appliance_softwareMatch9.1.6.8

ciscoadaptive_security_appliance_softwareMatch9.1.6.10

ciscoadaptive_security_appliance_softwareMatch9.2.1

ciscoadaptive_security_appliance_softwareMatch9.2.2

ciscoadaptive_security_appliance_softwareMatch9.2.2.4

ciscoadaptive_security_appliance_softwareMatch9.2.2.7

ciscoadaptive_security_appliance_softwareMatch9.2.3

ciscoadaptive_security_appliance_softwareMatch9.2.2.8

ciscoadaptive_security_appliance_softwareMatch9.2.0.0

ciscoadaptive_security_appliance_softwareMatch9.2.0.104

ciscoadaptive_security_appliance_softwareMatch9.2.3.1

ciscoadaptive_security_appliance_softwareMatch9.2.4

ciscoadaptive_security_appliance_softwareMatch9.3.2

VendorProductVersionCPE
ciscoadaptive_security_appliance_software7.2cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.0cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.2cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.1cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.3cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.5cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.6cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software8.7cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.0cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.1cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_software	7.2	cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2:::::::*
cisco	adaptive_security_appliance_software	8.0	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:::::::*
cisco	adaptive_security_appliance_software	8.2	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:::::::*
cisco	adaptive_security_appliance_software	8.1	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1:::::::*
cisco	adaptive_security_appliance_software	8.3	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3:::::::*
cisco	adaptive_security_appliance_software	8.5	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:::::::*
cisco	adaptive_security_appliance_software	8.6	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6:::::::*
cisco	adaptive_security_appliance_software	8.7	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7:::::::*
cisco	adaptive_security_appliance_software	9.0	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:::::::*
cisco	adaptive_security_appliance_software	9.1	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1:::::::*