Security Advisory

CVE-2015-0675

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-04-13 01:00:00

Last updated 2024-08-06 04:17:32

Assigner cisco

CVSS score not scored

State PUBLISHED

Description

The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrative control, by sending crafted UDP packets over the local network to the failover interface, aka Bug ID CSCur21069.

← Browse all CVEs View on cve.org ↗