Lucene search

K
cveCiscoCVE-2015-0678
HistoryApr 11, 2015 - 1:59 a.m.

CVE-2015-0678

2015-04-1101:59:00
CWE-20
cisco
web.nvd.nist.gov
32
cisco
asa
firepower
software
denial of service
cve-2015-0678
security vulnerability
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

56.0%

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954.

Affected configurations

Nvd
Node
ciscoasa_with_firepower_servicesMatch5.3.1
OR
ciscoasa_with_firepower_servicesMatch5.3.1.1
OR
ciscoasa_with_firepower_servicesMatch5.4.0
Node
ciscoasa_cx_context-aware_security_softwareMatch9.0.1
OR
ciscoasa_cx_context-aware_security_softwareMatch9.0.1-40
OR
ciscoasa_cx_context-aware_security_softwareMatch9.0.2
OR
ciscoasa_cx_context-aware_security_softwareMatch9.0.2-68
OR
ciscoasa_cx_context-aware_security_softwareMatch9.0_base
OR
ciscoasa_cx_context-aware_security_softwareMatch9.1.2-29
OR
ciscoasa_cx_context-aware_security_softwareMatch9.1.2-42
OR
ciscoasa_cx_context-aware_security_softwareMatch9.1.3-8
OR
ciscoasa_cx_context-aware_security_softwareMatch9.1.3-10
OR
ciscoasa_cx_context-aware_security_softwareMatch9.1.3-13
OR
ciscoasa_cx_context-aware_security_softwareMatch9.2.1-1
OR
ciscoasa_cx_context-aware_security_softwareMatch9.2.1-2
OR
ciscoasa_cx_context-aware_security_softwareMatch9.2.1-3
OR
ciscoasa_cx_context-aware_security_softwareMatch9.2.1-4
OR
ciscoasa_cx_context-aware_security_softwareMatch9.3\(1.1.112\)
OR
ciscoasa_cx_context-aware_security_softwareMatch9.3.1-1
OR
ciscoasa_cx_context-aware_security_softwareMatch9.3.2-1
OR
ciscoasa_cx_context-aware_security_softwareMatch9.3_base
VendorProductVersionCPE
ciscoasa_with_firepower_services5.3.1cpe:2.3:o:cisco:asa_with_firepower_services:5.3.1:*:*:*:*:*:*:*
ciscoasa_with_firepower_services5.3.1.1cpe:2.3:o:cisco:asa_with_firepower_services:5.3.1.1:*:*:*:*:*:*:*
ciscoasa_with_firepower_services5.4.0cpe:2.3:o:cisco:asa_with_firepower_services:5.4.0:*:*:*:*:*:*:*
ciscoasa_cx_context-aware_security_software9.0.1cpe:2.3:o:cisco:asa_cx_context-aware_security_software:9.0.1:*:*:*:*:*:*:*
ciscoasa_cx_context-aware_security_software9.0.1-40cpe:2.3:o:cisco:asa_cx_context-aware_security_software:9.0.1-40:*:*:*:*:*:*:*
ciscoasa_cx_context-aware_security_software9.0.2cpe:2.3:o:cisco:asa_cx_context-aware_security_software:9.0.2:*:*:*:*:*:*:*
ciscoasa_cx_context-aware_security_software9.0.2-68cpe:2.3:o:cisco:asa_cx_context-aware_security_software:9.0.2-68:*:*:*:*:*:*:*
ciscoasa_cx_context-aware_security_software9.0_basecpe:2.3:o:cisco:asa_cx_context-aware_security_software:9.0_base:*:*:*:*:*:*:*
ciscoasa_cx_context-aware_security_software9.1.2-29cpe:2.3:o:cisco:asa_cx_context-aware_security_software:9.1.2-29:*:*:*:*:*:*:*
ciscoasa_cx_context-aware_security_software9.1.2-42cpe:2.3:o:cisco:asa_cx_context-aware_security_software:9.1.2-42:*:*:*:*:*:*:*
Rows per page:
1-10 of 211

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

56.0%