Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3394 Security Bypass Vulnerability
BID:70299
Info
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3394 Security Bypass Vulnerability
| Bugtraq ID: | 70299 |
| Class: | Design Error |
| CVE: |
CVE-2014-3394 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 08 2014 12:00AM |
| Updated: | Oct 08 2014 12:00AM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3394 Security Bypass Vulnerability
Cisco Adaptive Security Appliance (ASA) Software is prone to a security-bypass vulnerability.
Successfully exploiting this issue will allow an attacker to perform certain unauthorized actions. This may lead to other attacks.
This issue is being tracked by Cisco Bug ID CSCun10916.
Cisco Adaptive Security Appliance (ASA) Software is prone to a security-bypass vulnerability.
Successfully exploiting this issue will allow an attacker to perform certain unauthorized actions. This may lead to other attacks.
This issue is being tracked by Cisco Bug ID CSCun10916.
Exploit / POC
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3394 Security Bypass Vulnerability
An attacker can carry out this attack using readily available network utilities.
An attacker can carry out this attack using readily available network utilities.
Solution / Fix
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3394 Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3394 Security Bypass Vulnerability
References:
References:
- Cisco Adaptive Security Appliance Homepage (Cisco)
- Cisco Homepage (Cisco )