Test Kennung:	1.3.6.1.4.1.25623.1.0.807093
Kategorie:	CISCO
Titel:	Cisco ASA Non-DCERPC Traffic Bypass Vulnerability (cisco-sa-20160111-asa)
Zusammenfassung:	Cisco ASA Software is prone to traffic bypass vulnerability.
Beschreibung:	Summary: Cisco ASA Software is prone to traffic bypass vulnerability. Vulnerability Insight: The flaw is due to an internal access control list (ACL), which is used to allow DCERPC traffic but is incorrectly programmed to allow all traffic types and not restricted to DCERPC TCP port 135. Vulnerability Impact: Successful exploitation allows the attacker to access hosts that should normally be restricted through the ASA. Solution: See the referenced vendor advisory for a solution. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6423 Cisco Security Advisory: 20160111 Cisco Adaptive Security Appliance Non-DCERPC Traffic Bypass Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160111-asa http://www.securitytracker.com/id/1034644
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.