4.3
CVSSv2

CVE-2014-0653

Published: 08/01/2014 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote malicious users to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco adaptive security appliance

Vendor Advisories

A vulnerability in the NetBIOS logout probe feature of the Identity Firewall (IDFW) feature of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to impact the authorization status of users authorized via this feature The vulnerability is due to insufficient validation of the NetBIOS probe response An att ...