PT-2007-6590 · Cisco · Cisco Pix+1
CVE-2007-5569
·
Publicado
2007-10-17
·
Atualizado
2023-08-11
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco PIX and ASA appliances versions 7.1 through 7.2
Description
The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted packets. This can occur during the processing of Media Gateway Control Protocol (MGCP) packets or Transport Layer Security (TLS) traffic that terminates on the appliance.
Recommendations
For versions 7.1 and 7.2, consider restricting or disabling the processing of MGCP packets and TLS traffic until a fix is available. As a temporary workaround, limiting the exposure of the appliance to untrusted networks may help minimize the risk of exploitation.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Asa
Cisco Pix