Vulnerability in Cisco Adaptive Security Appliance Software

CVE-2013-5507

The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service (device reload) via a (1) ICMP or (2) ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Adaptive_security_appliance_software — versions 9.1
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)