CVE-2015-4238
published 2015-07-02CVE-2015-4238: The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service…
PriorityP430medium6.8CVSS 2.0
AVNACLAuSCNINAC
EPSS
1.74%
75.2th percentile
The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:C
vendor_cisco6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Adaptive Security Appliance SNMP Denial of Service Vulnerability
vendor_cisco·2015-07-01·CVSS 6.8
CVE-2015-4238 [MEDIUM] CWE-399 Cisco Adaptive Security Appliance SNMP Denial of Service Vulnerability
Cisco Adaptive Security Appliance SNMP Denial of Service Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a reload of the affected system.
The vulnerability is due to improper handling of SNMP packets. An attacker could exploit this vulnerability by sending a high rate of traffic through the device while performing SNMP operations continuously. A successful exploit could cause a denial of service (DoS) condition on the targeted device.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must authenticate to the targeted device. This access requirement reduces the likelihood of a success
GHSA
GHSA-ggh2-rp92-pqpm: The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8
ghsa_unreviewed·2022-05-13
CVE-2015-4238 [MEDIUM] GHSA-ggh2-rp92-pqpm: The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8
The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-07-02
Published