CVE-2011-0395
published 2011-02-25CVE-2011-0395: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before…
PriorityP340high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.58%
83.5th percentile
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | asa_5500_series_adaptive_security_appliances | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco·2011-02-23·CVSS 7.8
CVE-2011-0393 [HIGH] CWE-399 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the
following vulnerabilities:
Transparent Firewall Packet Buffer Exhaustion Vulnerability
Skinny Client Control Protocol (SCCP) Inspection Denial of Service
Vulnerability
Routing Information Protocol (RIP) Denial of Service
Vulnerability
Unauthorized File System Access Vulnerability
These vulnerabilities are independent; a release that is affected by
one vulnerability is not necessarily affected by the others.
Cisco has released software updates that address these vulnerabilities.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110223-asa.
Note: The Cisco Firewall Serv
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco
CVE-2011-0395 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
CVE-2011-0395: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the following vulnerabilities: Transparent Firewall Packet Buffer Exhaustion Vulnerability Skinny Client Control Protocol (SCCP) Inspection Denial of Service Vulnerability Routing Information Protocol (RIP) Denial of Service Vulnerability Unauthorized File System Access Vulnerability These vulnerabilities are independent; a release that is affected by one vulnerability is not necessarily affected by the others. Cisco has released software updates that address these vulnerabilities. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110223-asa . Note: The Cisco Firewal
GHSA
GHSA-gqgp-8xv7-mjfw: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8
ghsa_unreviewed·2022-05-14
CVE-2011-0395 [HIGH] GHSA-gqgp-8xv7-mjfw: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/43488http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtmlhttp://www.securitytracker.com/id?1025108http://www.vupen.com/english/advisories/2011/0493https://exchange.xforce.ibmcloud.com/vulnerabilities/65590http://secunia.com/advisories/43488http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtmlhttp://www.securitytracker.com/id?1025108http://www.vupen.com/english/advisories/2011/0493https://exchange.xforce.ibmcloud.com/vulnerabilities/65590
2011-02-25
Published