CVEvulnerability

CVE-2014-3382

7.8 HIGH Published 2014-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-89

Description

The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted SQL REDIRECT packets, aka Bug ID CSCum46027.

Affected configurations

• cisco asa 7.2.5 • cisco asa 7.2.5.10 • cisco asa 8.2.5 • cisco asa 8.2.5.13 • cisco asa 8.2.5.22 • cisco asa 8.2.5.26 • cisco asa 8.2.5.33 • cisco asa 8.2.5.41 • cisco asa 8.2.5.46 • cisco asa 8.2.5.48 • cisco asa 8.2.5.49 • cisco asa 8.3 • cisco asa 8.3.2.25 • cisco asa 8.4 • cisco asa 8.4.1 • cisco asa 8.4.2 • cisco asa 8.4.3 • cisco asa 8.4.4 • cisco asa 8.4.5 • cisco asa 8.4.6 • cisco asa 8.4.7 • cisco asa 8.5 • cisco asa 8.5.1.6 • cisco asa 8.6 • cisco asa 8.7 • cisco asa 9.0 • cisco asa 9.1

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References