6.8
CVSSv2

CVE-2015-4238

Published: 02/07/2015 Updated: 15/08/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8
VMScore: 605
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C

Vulnerability Summary

A vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote malicious user to cause a reload of the affected system. The vulnerability is due to improper handling of SNMP packets. An attacker could exploit this vulnerability by sending a high rate of traffic through the device while performing SNMP operations continuously. A successful exploit could cause a denial of service (DoS) condition on the targeted device. Cisco has confirmed the vulnerability and released software updates. To exploit this vulnerability, an attacker must authenticate to the targeted device. This access requirement reduces the likelihood of a successful exploit. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco adaptive security appliance software 8.4\\(7\\)

cisco adaptive security appliance software 8.6\\(1.2\\)

Vendor Advisories

A vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a reload of the affected system The vulnerability is due to improper handling of SNMP packets An attacker could exploit this vulnerability by sending a high rate of traff ...