CVE-2014-3389 The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9...
HighCVSS 9.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.6), and 9.3 before 9.3(1.1) does not properly implement a tunnel filter, which allows remote authenticated users to obtain failover-unit access via crafted packets, aka Bug ID CSCuq28582.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco asa | = 7.2.5 | No fix listed |
| cisco asa | = 7.2.5.10 | No fix listed |
| cisco asa | = 8.2.5 | No fix listed |
| cisco asa | = 8.2.5.13 | No fix listed |
| cisco asa | = 8.2.5.22 | No fix listed |
| cisco asa | = 8.2.5.26 | No fix listed |
| cisco asa | = 8.2.5.33 | No fix listed |
| cisco asa | = 8.2.5.41 | No fix listed |
| cisco asa | = 8.2.5.46 | No fix listed |
| cisco asa | = 8.2.5.48 | No fix listed |
| cisco asa | = 8.2.5.49 | No fix listed |
| cisco asa | = 8.3 | No fix listed |
| cisco asa | = 8.3.2.25 | No fix listed |
| cisco asa | = 8.4 | No fix listed |
| cisco asa | = 8.4.1 | No fix listed |
| cisco asa | = 8.4.2 | No fix listed |
| cisco asa | = 8.4.3 | No fix listed |
| cisco asa | = 8.4.4 | No fix listed |
| cisco asa | = 8.4.5 | No fix listed |
| cisco asa | = 8.4.6 | No fix listed |
| cisco asa | = 8.4.7 | No fix listed |
| cisco asa | = 8.6 | No fix listed |
| cisco asa | = 9.0 | No fix listed |
| cisco asa | = 9.1 | No fix listed |
| cisco asa | = 9.2 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco asa | = 9.3 | No fix listed |
References
- 20141008 Multiple Vulnerabilities in Cisco ASA Software vendor-advisory