Vulnerability in Cisco Adaptive Security Appliance
CVE-2011-0395
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.
EPSS: 0.026 (84.3th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance — versions 8.3, 8.0(4), 8.2\(2\)
- Cisco Adaptive_security_appliance_software — versions 8.0, 8.3(1), 8.3\(1\)
- Cisco Asa_5500
- Cisco Asa_5505
- Cisco Asa_5510
- Cisco Asa_5520
- Cisco Asa_5540
- Cisco Asa_5550
- Cisco Asa_5580
- Cisco Pix_500
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
- psirt@cisco.com (vdb-entry, x_refsource_XF)