cisco adaptive security appliance, cisco secure firewall threat defense, cisco adaptive security appliance software
CVSS 7.5 · High EPSS 1,9%
Kerentanan Uncontrolled Resource Consumption pada cisco adaptive security appliance, cisco secure firewall threat defense +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.
A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient direct memory access (DMA) memory management during the negotiation phase of an SSL VPN connection. An attacker could exploit this vulnerability by sending a steady stream of crafted Datagram TLS (DTLS) traffic to an affected device. A successful exploit could allow the attacker to exhaust DMA memory on the device and cause a DoS condition.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | adaptive security appliance | Semua versi sebelum 9.6.4.45 |
| cisco | secure firewall threat defense | Semua versi sebelum 6.3.0.6 |
| cisco | secure firewall threat defense | Versi 6.4.0 hingga sebelum 6.4.0.10 |
| cisco | secure firewall threat defense | Versi 6.5.0 hingga sebelum 6.5.0.5 |
| cisco | secure firewall threat defense | Versi 6.6.0 hingga sebelum 6.6.1 |
| cisco | adaptive security appliance software | Versi 9.8.0 hingga sebelum 9.8.4.29 |
| cisco | adaptive security appliance software | Versi 9.9.0 hingga sebelum 9.9.2.80 |
| cisco | adaptive security appliance software | Versi 9.10.0 hingga sebelum 9.10.1.44 |
| cisco | adaptive security appliance software | Versi 9.12.0 hingga sebelum 9.12.4.4 |
| cisco | adaptive security appliance software | Versi 9.13.0 hingga sebelum 9.13.1.13 |
| cisco | adaptive security appliance software | Versi 9.14.0 hingga sebelum 9.14.1.30 |