CVEvulnerability
CVE-2015-4550
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-310
Description
The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218.
Affected configurations
• cisco adaptive security appliance software 9.3\(3\)
• cisco adaptive security appliance software 9.4\(1.1\)
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39366 Vendor Advisory
- http://www.securityfocus.com/bid/75269 www.securityfocus.com
- http://www.securitytracker.com/id/1032595 www.securitytracker.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39366 Vendor Advisory
- http://www.securityfocus.com/bid/75269 www.securityfocus.com
- http://www.securitytracker.com/id/1032595 www.securitytracker.com