SecuritySpace - CVE-2015-4550

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-4550

Description: The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218.

Test IDs: 1.3.6.1.4.1.25623.1.0.106011

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-4550
BugTraq ID: 75269
http://www.securityfocus.com/bid/75269
Cisco Security Advisory: 20150616 Cisco Adaptive Security Appliance Encrypted IPSec or IKEv2 Packet Modification Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=39366
http://www.securitytracker.com/id/1032595

CVE ID:	CVE-2015-4550
Description:	The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218.
Test IDs:	1.3.6.1.4.1.25623.1.0.106011
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4550 BugTraq ID: 75269 http://www.securityfocus.com/bid/75269 Cisco Security Advisory: 20150616 Cisco Adaptive Security Appliance Encrypted IPSec or IKEv2 Packet Modification Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=39366 http://www.securitytracker.com/id/1032595