CVE-2015-4321

The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), and 9.4(1) mishandles cases where an IP address belongs to an internal interface but is also in the ASA routing table, which allows remote attackers to bypass uRPF validation via spoofed packets, aka Bug ID CSCuv60724.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://tools.cisco.com/security/center/viewAlert.x?alertId=40440	Vendor Advisory
http://www.securitytracker.com/id/1033265

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(1.50\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(2.100\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(3\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4\(1\):::::::*

History

No history.

Information

Published : 2015-08-20 10:59

Updated : 2023-08-11 18:54

NVD link : CVE-2015-4321

Mitre link : CVE-2015-4321

CVE.ORG link : CVE-2015-4321

JSON object : View

Products Affected

cisco

adaptive_security_appliance_software

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2015-4321", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-08-20T10:59:09.950", "references": [{"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40440", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1033265", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), and 9.4(1) mishandles cases where an IP address belongs to an internal interface but is also in the ASA routing table, which allows remote attackers to bypass uRPF validation via spoofed packets, aka Bug ID CSCuv60724."}, {"lang": "es", "value": "Vulnerabilidad en la implementaci\u00f3n Unicast Reverse Path Forwarding (uRPF) en Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3) y 9.4(1), no maneja correctamente casos en los que una direcci\u00f3n IP pertenece a una interfaz interna pero tambi\u00e9n est\u00e1 en la tabla ASA de enrutamiento, lo que permite a atacantes remotos eludir la validaci\u00f3n uRPF a trav\u00e9s de paquetes suplantados, tambi\u00e9n conocida como Bug ID CSCuv60724."}], "lastModified": "2023-08-11T18:54:47.730", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E044883-9952-477A-B2AA-3E0BB90C96A0"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(3\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63FECF84-4FFB-443E-8529-A1FA4D1D821C"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B854F299-3798-41E7-9C02-17729B75B01C"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}