ID de Prueba:	1.3.6.1.4.1.25623.1.0.106037
Categoría:	CISCO
Título:	Cisco ASA uRFP Bypass Vulnerability (Cisco-SA-20150812-CVE-2015-4321)
Resumen:	Cisco ASA is prone to a Unicast Reverse Path Forwarding Bypass; vulnerability.
Descripción:	Summary: Cisco ASA is prone to a Unicast Reverse Path Forwarding Bypass vulnerability. Vulnerability Insight: The vulnerability is due to incorrect uRPF validation where IP packets from an outside interface, whose IP address is both in the ASA routing table and associated with an internal interface, are not dropped. An unauthenticated, remote attacker could exploit this vulnerability by sending spoofed IP packets to a targeted ASA in a subnet range that should be dropped. Vulnerability Impact: An exploit could allow the attacker to bypass uRPF validation on the ASA which would cause packets to be incorrectly forwarded on the internal network. Affected Software/OS: Cisco ASA version 9.3 and 9.4. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4321 Cisco Security Advisory: 20150812 Cisco ASA Unicast Reverse Path Forwarding (uRPF) Bypass Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40440 http://www.securitytracker.com/id/1033265
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.