HomePentest-Tools.com Logo

Cisco ASA uRFP Bypass Vulnerability (Cisco-SA-20150812-CVE-2015-4321)

Severity
Not available
CVSSv3 Score
Not available
Vulnerability description

Cisco ASA is prone to a Unicast Reverse Path Forwarding Bypass vulnerability.

Risk description

The vulnerability is due to incorrect uRPF validation where IP packets from an outside interface, whose IP address is both in the ASA routing table and associated with an internal interface, are not dropped. An unauthenticated, remote attacker could exploit this vulnerability by sending spoofed IP packets to a targeted ASA in a subnet range that should be dropped. An exploit could allow the attacker to bypass uRPF validation on the ASA which would cause packets to be incorrectly forwarded on the internal network.

Recommendation

See the referenced vendor advisory for a solution.

Codename
Not available
Detectable with
Network Scanner
Scan engine
OpenVAS
Exploitable with Sniper
No
CVE Published
Aug 20, 2015
Detection added at
Software Type
Not available
Vendor
Not available
Product
Not available