CVEvulnerability

CVE-2014-3385

7.8 HIGH Published 2014-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-362

Description

Race condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA Software 8.3 before 8.3(2.42), 8.4 before 8.4(7.11), 8.5 before 8.5(1.19), 8.6 before 8.6(1.13), 8.7 before 8.7(1.11), 9.0 before 9.0(4.8), and 9.1 before 9.1(4.5) allows remote attackers to cause a denial of service (device reload) via TCP traffic that triggers many half-open connections at the same time, aka Bug ID CSCum00556.

Affected configurations

• cisco asa 8.3 • cisco asa 8.3.2.25 • cisco asa 8.4 • cisco asa 8.4.1 • cisco asa 8.4.2 • cisco asa 8.4.3 • cisco asa 8.4.4 • cisco asa 8.4.5 • cisco asa 8.4.6 • cisco asa 8.4.7 • cisco asa 8.5 • cisco asa 8.5.1.6 • cisco asa 8.6 • cisco asa 8.7 • cisco asa 9.0 • cisco asa 9.1

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References