CVE-2016-1445 — Improper Input Validation in Cisco Adaptive Security Appliance Software

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.3%
top 46.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance Software
Timeline
PublishedJul 12
Latest updateMay 13

Description

Cisco Adaptive Security Appliance (ASA) Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-g8vp-hcf8-c48x: Cisco Adaptive Security Appliance (ASA) Software 8↗2022-05-13
▶
CVEList
CVE-2016-1445: Cisco Adaptive Security Appliance (ASA) Software 8↗2016-07-12
▶

📋Vendor Advisories

1
Cisco
Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability↗2016-07-11
▶
CVE-2016-1445 — Improper Input Validation in Cisco | cvebase