What is CVE-2015-0760?

CVE-2015-0760 is a vulnerability in Cisco Adaptive Security Appliance Software, classified under Improper Input Validation. Published 2015-06-04.

Is CVE-2015-0760 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Cisco Adaptive Security Appliance Software

CVE-2015-0760

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.

Affected products

Cisco Adaptive_security_appliance_software
N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

SpiderLabs/ikeforce

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2015-0760?: CVE-2015-0760 is a vulnerability in Cisco Adaptive Security Appliance Software, classified under Improper Input Validation. Published 2015-06-04.
Is CVE-2015-0760 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.