Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.105979
Categoría:CISCO
Título:Cisco ASA Health and Performance Monitor DoS Vulnerability (cisco-sa-20141008-asa)
Resumen:A vulnerability in Health and Performance Monitoring (HPM) for; ASDM functionality of Cisco ASA Software could allow an unauthenticated, remote attacker to cause; a reload of an affected device and eventual denial of service (DoS) condition.
Descripción:Summary:
A vulnerability in Health and Performance Monitoring (HPM) for
ASDM functionality of Cisco ASA Software could allow an unauthenticated, remote attacker to cause
a reload of an affected device and eventual denial of service (DoS) condition.

Vulnerability Insight:
The vulnerability is due to a race condition in the operation
of the HPM functionality. An attacker could exploit this vulnerability by sending a large number
of half-open simultaneous connections to be established through the affected device.

Vulnerability Impact:
An unauthenticated, remote attacker could exploit this
vulnerability by sending a large number of half-open simultaneous connections to be established
through a targeted device. An exploit could allow the attacker to cause the device to reload,
resulting in a DoS condition.

Affected Software/OS:
Cisco ASA version 8.3, 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2014-3385
Cisco Security Advisory: 20141008 Multiple Vulnerabilities in Cisco ASA Software
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.