Cisco Adaptive Security Appliance Authorization State Change Security Bypass Vulnerability

Bugtraq ID:	64708
Class:	Design Error
CVE:	CVE-2014-0653
Remote:	Yes
Local:	No
Published:	Jan 07 2014 12:00AM
Updated:	Jan 07 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Adaptive Security Appliance Authorization State Change Security Bypass Vulnerability

Cisco Adaptive Security Appliance is prone to a security-bypass vulnerability.

Successfully exploiting this issue will allow an attacker to perform certain unauthorized actions. This may lead to other attacks.

This issue is being tracked by Cisco Bug ID CSCuj45340.

Cisco Adaptive Security Appliance Authorization State Change Security Bypass Vulnerability

An attacker can carry out this attack using readily available network utilities.

Cisco Adaptive Security Appliance Authorization State Change Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Adaptive Security Appliance Authorization State Change Security Bypass Vulnerability

References:

• Cisco Adaptive Security Appliance Homepage (Cisco)
  
• Cisco Homepage (Cisco )