cisco secure firewall threat defense, cisco adaptive security appliance software
CVSS 7.5 · High EPSS 1,4%
Kerentanan Insufficient Session Expiration pada cisco secure firewall threat defense, cisco adaptive security appliance software. Skor CVSS 3.1 7.5 (High) menurut NVD.
A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition.The vulnerability is due to a crash that occurs during a hash lookup for a SIP pinhole connection. An attacker could exploit this vulnerability by sending crafted SIP traffic through an affected device. A successful exploit could allow the attacker to cause a crash and reload of the affected device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | secure firewall threat defense | Versi 6.2.2 hingga sebelum 6.4.0.12 |
| cisco | secure firewall threat defense | Versi 6.5.0 hingga sebelum 6.6.4 |
| cisco | secure firewall threat defense | Versi 6.7.0 hingga sebelum 6.7.0.2 |
| cisco | adaptive security appliance software | Versi 9.8 hingga sebelum 9.8.4.34 |
| cisco | adaptive security appliance software | Versi 9.9 hingga sebelum 9.9.2.85 |
| cisco | adaptive security appliance software | Versi 9.10 hingga sebelum 9.12.4.18 |
| cisco | adaptive security appliance software | Versi 9.13 hingga sebelum 9.13.1.21 |
| cisco | adaptive security appliance software | Versi 9.14 hingga sebelum 9.14.2.13 |
| cisco | adaptive security appliance software | Versi 9.15 hingga sebelum 9.15.1.15 |