Višestruke CISCO ASA ranjivosti

Cisco Adaptive Security Appliance (ASA) softver ima sledeće ranjivosti:

    Cisco ASA SQL*NET Inspection Engine – Denial of Service Vulnerability
    Cisco ASA VPN – Denial of Service Vulnerability
    Cisco ASA IKEv2 – Denial of Service Vulnerability
    Cisco ASA Health and Performance Monitor – Denial of Service Vulnerability
    Cisco ASA GPRS Tunneling Protocol Inspection Engine – Denial of Service Vulnerability
    Cisco ASA SunRPC Inspection Engine – Denial of Service Vulnerability
    Cisco ASA DNS Inspection Engine – Denial of Service Vulnerability
    Cisco ASA VPN Failover Command Injection Vulnerability
    Cisco ASA VNMC – Command Input Validation Vulnerability
    Cisco ASA – Local Path Inclusion Vulnerability
    Cisco ASA Clientless SSL VPN – Information Disclosure and Denial of Service Vulnerability
    Cisco ASA Clientless SSL VPN – Portal Customization Integrity Vulnerability
    Cisco ASA Smart Call Home Digital Certificate Validation Vulnerability

Ranjivosti su nezavisne jedne od drugih, te uređaji koji imaju jednu ne moraju imati i druge. Cisco je objavio softverska ažuriranja za navedene ranjivosti. Detaljniji pregled je dostupan na linku http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa.

Izvor:tools.cisco.com