HomePentest-Tools.com Logo

Cisco ASA uRFP Bypass Vulnerability (Cisco-SA-20150812-CVE-2015-4321)

Not available
CVSSv3 Score
Not available
Vulnerability description

Cisco ASA is prone to a Unicast Reverse Path Forwarding Bypass vulnerability.

Risk description

The vulnerability is due to incorrect uRPF validation where IP packets from an outside interface, whose IP address is both in the ASA routing table and associated with an internal interface, are not dropped. An unauthenticated, remote attacker could exploit this vulnerability by sending spoofed IP packets to a targeted ASA in a subnet range that should be dropped. An exploit could allow the attacker to bypass uRPF validation on the ASA which would cause packets to be incorrectly forwarded on the internal network.


See the referenced vendor advisory for a solution.

Not available
Detectable with
Network Scanner
Scan engine
Exploitable with Sniper
CVE Published
Aug 20, 2015
Detection added at
Software Type
Not available
Not available
Not available