Security Alert (A15-10-06): Multiple Vulnerabilities in Cisco Products


 

Published on: 22 October 2015

  
  

Description:

Cisco has released security advisories fixing a number of vulnerabilities in Cisco security appliances, virtual appliances and services modules as listed below:

  • Cisco ASA Software DHCPv6 Relay Denial of Service Vulnerability
  • Cisco ASA Software DNS Denial of Service Vulnerability
  • Cisco ASA Software VPN ISAKMP Denial of Service Vulnerability

There are multiple attack vectors against the affected systems or modules. An unauthenticated remote attacker could send crafted UDP packets, crafted DNS request and spoofed DNS response, or crafted DHCPv6 packets to an affected system to exploit the vulnerabilities.


Affected Systems:

  • Cisco ASA 1000V Cloud Firewall
  • Cisco ASA 5500 Series Adaptive Security Appliances (ASA)
  • Cisco ASA 5500-X Series Next-Generation Firewalls
  • Cisco ASA Services Module for Catalyst 6500 Series Switches and 7600 Series Routers
  • Cisco Adaptive Security Virtual Appliance (ASAv)
  • Cisco FirePOWER 9300 ASA Security Module

Impact:

A successful attack could cause a reload of the affected system.


Recommendation:

Patches for affected systems are now available. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk. For detailed information of the available patches, please refer to the section "Fixed Software" of corresponding security advisory at vendor's website.


More Information:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dhcp1
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns1
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns2
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-ike
https://www.us-cert.gov/ncas/current-activity/2015/10/21/Cisco-Releases-Security-Updates
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6324
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6325
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6326
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6327



Tag: Cisco , Cisco ASA , Cisco ASAv , Cisco FirePOWER
Tags