Published: 04/06/2015 Updated: 31/05/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Subscribe to Adaptive Security Appliance Software

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x prior to 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco adaptive security appliance software

A vulnerability in Internet Key Exchange (IKE) version 1 (v1) code of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to bypass Extended Authentication (XAUTH) and successfully log in via IPsec remote VPN The vulnerability is due to improper implementation of the logic of the XAUTH code An attacker ...

This project is no longer maintained IKEForce Dan Turner dturner@trustwavecom wwwspiderlabscom INTRODUCTION IKEForce is a command line IPSEC VPN brute forcing tool for Linux that allows group name/ID enumeration and XAUTH brute forcing capabilities Guides can be found here: blogspiderlabscom/2013/03/cracking-ike-aggressive-mode-hashes-part-1html blo

CWE-264 CWE-20 http://tools.cisco.com/security/center/viewAlert.x?alertId=39157 http://www.securitytracker.com/id/1032473 https://nvd.nist.gov https://github.com/SpiderLabs/ikeforce http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150602-CVE-2015-0760

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-0760

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect