CVE-2015-4458

published 2015-07-18

CVE-2015-4458: The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Security Appliance (ASA) Software 9.1(5.21) and other…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Security Appliance (ASA) Software 9.1(5.21) and other products, does not verify the MAC field, which allows man-in-the-middle attackers to spoof TLS content by modifying packets, aka Bug ID CSCuu52976.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
cisco	adaptive_security_appliance_software	—	—

CWE-310