CVE-2015-0678

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954.

Published: Apr 11, 2015
Updated: Apr 13, 2023
CVE: CVE-2015-0678
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
cisco / asa_with_firepower_services	5.4.0	5.4.0.x
cisco / asa_with_firepower_services	5.3.1	5.3.1.x
cisco / asa_with_firepower_services	5.3.1.1	5.3.1.1.x
cisco / asa_cx_context-aware_security_software	9.1.3-8	9.1.3-8.x
cisco / asa_cx_context-aware_security_software	9.2.1-2	9.2.1-2.x
cisco / asa_cx_context-aware_security_software	9.3(1.1.112)	9.3(1.1.112).x
cisco / asa_cx_context-aware_security_software	9.1.2-29	9.1.2-29.x
cisco / asa_cx_context-aware_security_software	9.2.1-4	9.2.1-4.x
cisco / asa_cx_context-aware_security_software	9.0.2-68	9.0.2-68.x
cisco / asa_cx_context-aware_security_software	9.3_base	9.3_base.x
cisco / asa_cx_context-aware_security_software	9.2.1-1	9.2.1-1.x
cisco / asa_cx_context-aware_security_software	9.0.2	9.0.2.x
cisco / asa_cx_context-aware_security_software	9.3.1-1	9.3.1-1.x
cisco / asa_cx_context-aware_security_software	9.0_base	9.0_base.x
cisco / asa_cx_context-aware_security_software	9.0.1-40	9.0.1-40.x
cisco / asa_cx_context-aware_security_software	9.1.2-42	9.1.2-42.x
cisco / asa_cx_context-aware_security_software	9.3.2-1	9.3.2-1.x
cisco / asa_cx_context-aware_security_software	9.0.1	9.0.1.x
cisco / asa_cx_context-aware_security_software	9.1.3-10	9.1.3-10.x
cisco / asa_cx_context-aware_security_software	9.1.3-13	9.1.3-13.x
cisco / asa_cx_context-aware_security_software	9.2.1-3	9.2.1-3.x

Vulnerability Database

290,206

CVE-2015-0678