Vulnerability in Cisco Asa

CVE-2014-3387

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), and 9.1 before 9.1(5.3) allows remote attackers to cause a denial of service (device reload) via crafted SunRPC packets, aka Bug ID CSCun11074.

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Asa — versions 7.2.5, 7.2.5.10, 8.2.5
  • N/a — versions n/a

Weakness classification (CWE)

References