CVE-2015-0678

EPSS 2.3%
Veröffentlicht 11.04.2015 01:59:00
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 20 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Asa With Firepower Services Version 5.3.1

Cisco ≫ Asa With Firepower Services Version 5.3.1.1

Cisco ≫ Asa With Firepower Services Version 5.4.0

Cisco ≫ Asa Cx Context-aware Security Software Version 9.0.1

Cisco ≫ Asa Cx Context-aware Security Software Version 9.0.1-40

Cisco ≫ Asa Cx Context-aware Security Software Version 9.0.2

Cisco ≫ Asa Cx Context-aware Security Software Version 9.0.2-68

Cisco ≫ Asa Cx Context-aware Security Software Version 9.0_base

Cisco ≫ Asa Cx Context-aware Security Software Version 9.1.2-29

Cisco ≫ Asa Cx Context-aware Security Software Version 9.1.2-42

Cisco ≫ Asa Cx Context-aware Security Software Version 9.1.3-8

Cisco ≫ Asa Cx Context-aware Security Software Version 9.1.3-10

Cisco ≫ Asa Cx Context-aware Security Software Version 9.1.3-13

Cisco ≫ Asa Cx Context-aware Security Software Version 9.2.1-1

Cisco ≫ Asa Cx Context-aware Security Software Version 9.2.1-2

Cisco ≫ Asa Cx Context-aware Security Software Version 9.2.1-3

Cisco ≫ Asa Cx Context-aware Security Software Version 9.2.1-4

Cisco ≫ Asa Cx Context-aware Security Software Version 9.3.1-1

Cisco ≫ Asa Cx Context-aware Security Software Version 9.3.2-1

Cisco ≫ Asa Cx Context-aware Security Software Version 9.3_base

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.3%	0.815

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-cxfp

Vendor Advisory

http://www.securitytracker.com/id/1032046

https://nvd.nist.gov/vuln/detail/CVE-2015-0678

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0678

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0678

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-0678