CVE-2014-3390

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions 8.7 before 8.7(1.14) Cisco ASA Software versions 9.2 before 9.2(2.8) Cisco ASA Software versions 9.3 before 9.3(1.1)

Description The issue allows local users to obtain Linux root access by leveraging administrative privileges and executing a crafted script. There have been disruptions to some systems.

Recommendations For Cisco ASA Software version 8.7, update to 8.7(1.14) or later. For Cisco ASA Software version 9.2, update to 9.2(2.8) or later. For Cisco ASA Software version 9.3, update to 9.3(1.1) or later.