Lucene search

K
nvd[email protected]NVD:CVE-2014-3382
HistoryOct 10, 2014 - 10:55 a.m.

CVE-2014-3382

2014-10-1010:55:06
CWE-89
web.nvd.nist.gov
2

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7

Confidence

High

EPSS

0.002

Percentile

56.2%

The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted SQL REDIRECT packets, aka Bug ID CSCum46027.

Affected configurations

Nvd
Node
ciscoasaMatch7.2.5
OR
ciscoasaMatch7.2.5.10
OR
ciscoasaMatch8.2.5
OR
ciscoasaMatch8.2.5.13
OR
ciscoasaMatch8.2.5.22
OR
ciscoasaMatch8.2.5.26
OR
ciscoasaMatch8.2.5.33
OR
ciscoasaMatch8.2.5.41
OR
ciscoasaMatch8.2.5.46
OR
ciscoasaMatch8.2.5.48
OR
ciscoasaMatch8.2.5.49
OR
ciscoasaMatch8.3
OR
ciscoasaMatch8.3.2.25
OR
ciscoasaMatch8.4
OR
ciscoasaMatch8.4.1
OR
ciscoasaMatch8.4.2
OR
ciscoasaMatch8.4.3
OR
ciscoasaMatch8.4.4
OR
ciscoasaMatch8.4.5
OR
ciscoasaMatch8.4.6
OR
ciscoasaMatch8.4.7
OR
ciscoasaMatch8.5
OR
ciscoasaMatch8.5.1.6
OR
ciscoasaMatch8.6
OR
ciscoasaMatch8.7
OR
ciscoasaMatch9.0
OR
ciscoasaMatch9.1
VendorProductVersionCPE
ciscoasa7.2.5cpe:2.3:a:cisco:asa:7.2.5:*:*:*:*:*:*:*
ciscoasa7.2.5.10cpe:2.3:a:cisco:asa:7.2.5.10:*:*:*:*:*:*:*
ciscoasa8.2.5cpe:2.3:a:cisco:asa:8.2.5:*:*:*:*:*:*:*
ciscoasa8.2.5.13cpe:2.3:a:cisco:asa:8.2.5.13:*:*:*:*:*:*:*
ciscoasa8.2.5.22cpe:2.3:a:cisco:asa:8.2.5.22:*:*:*:*:*:*:*
ciscoasa8.2.5.26cpe:2.3:a:cisco:asa:8.2.5.26:*:*:*:*:*:*:*
ciscoasa8.2.5.33cpe:2.3:a:cisco:asa:8.2.5.33:*:*:*:*:*:*:*
ciscoasa8.2.5.41cpe:2.3:a:cisco:asa:8.2.5.41:*:*:*:*:*:*:*
ciscoasa8.2.5.46cpe:2.3:a:cisco:asa:8.2.5.46:*:*:*:*:*:*:*
ciscoasa8.2.5.48cpe:2.3:a:cisco:asa:8.2.5.48:*:*:*:*:*:*:*
Rows per page:
1-10 of 271

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7

Confidence

High

EPSS

0.002

Percentile

56.2%